TI-2025-03123 CVE-2025-3554 · GHSA-27p4-6mmr-736m
phpshe api.php cross site scripting
Priority MEDIUM 57
A vulnerability was found in phpshe 1.8.
Phpshe
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
Phpshe records in CISA KEVNo Phpshe vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
14 records
TI-2025-03122 CVE-2025-3553 · GHSA-4777-7p5h-hq97
phpshe admin.php pe_delete sql injection
Priority MEDIUM 57
A vulnerability was found in phpshe 1.8.
TI-2019-07154 CVE-2019-9762 · GHSA-jpjx-j79x-pv9c
A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php…
Priority MEDIUM 51
A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id.
TI-2020-13298 CVE-2020-18020 · GHSA-jgxj-6h4c-hpvg
SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary…
Priority MEDIUM 49
SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "user_phone" parameter of a crafted HTTP request to the "admin.php" component.
TI-2020-13548 CVE-2020-19165 · GHSA-rhq4-w8hr-cp6m
PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevel_id=1 userlevel_id[] parameter.
Priority MEDIUM 45
PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevel_id=1 userlevel_id[] parameter.
TI-2019-07041 CVE-2019-9626 · GHSA-373g-j2hc-873c
PHPSHE 1.7 allows module/index/cart.php pintuan_id SQL Injection to index.php.
Priority MEDIUM 45
PHPSHE 1.7 allows module/index/cart.php pintuan_id SQL Injection to index.php.
TI-2018-13072 CVE-2018-18486 · GHSA-3679-w9pg-j7j7
An issue was discovered in PHPSHE 1.7.
Priority MEDIUM 44
An issue was discovered in PHPSHE 1.7.
TI-2018-06481 CVE-2018-8943 · GHSA-qj74-7fp5-x866
There is a SQL injection in the PHPSHE 1.6 userbank parameter.
Priority MEDIUM 44
There is a SQL injection in the PHPSHE 1.6 userbank parameter.
TI-2020-13348 CVE-2020-18215 · GHSA-p8qp-fqw2-crxv
Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the (1)…
Priority MEDIUM 42
Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the (1) ad_id, (2) menu_id, and (3) cashout_id parameters, which could let a remote malicious user execute arbitrary code.
TI-2018-13071 CVE-2018-18485 · GHSA-5c85-65r2-4x5q
An issue was discovered in PHPSHE 1.7.
Priority LOW 37
An issue was discovered in PHPSHE 1.7.
TI-2019-07153 CVE-2019-9761 · GHSA-c758-m683-8fqc
An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the…
Priority LOW 36
An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication.
TI-2022-08077 CVE-2022-24132 · GHSA-g3pp-q89q-rmj3
phpshe V1.8 is affected by a denial of service (DoS) attack in the registry's…
Priority LOW 35
phpshe V1.8 is affected by a denial of service (DoS) attack in the registry's verification code, which can paralyze the target service.
TI-2019-04754 CVE-2019-6708 · GHSA-fxxr-m87j-8c2j
PHPSHE 1.7 has SQL injection via the admin.php?mod=order state parameter.
Priority LOW 34
PHPSHE 1.7 has SQL injection via the admin.php?mod=order state parameter.
TI-2019-04753 CVE-2019-6707 · GHSA-q985-rc86-p7w8
PHPSHE 1.7 has SQL injection via the admin.php?mod=product&act=state product_id[] parameter.
Priority LOW 34
PHPSHE 1.7 has SQL injection via the admin.php?mod=product&act=state product_id[] parameter.