Read the docs

Tp-shop

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Tp-shop records in CISA KEV

No Tp-shop vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tp-shop 2 records MEDIUM Tpshop 1 record MEDIUM

Records

3 records

TI-2018-07029 CVE-2018-9919 · GHSA-8mqr-gh66-wpgv

A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8…

Priority MEDIUM 50

A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution, b…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04662 Published 2018-05-02 No fix listed CWE-918
TI-2017-12225 CVE-2017-16614 · GHSA-c6w3-g6h7-fp2f

SSRF (Server Side Request Forgery) in tpshop 2.0.5 and 2.0.6 allows remote attackers to…

Priority MEDIUM 47

SSRF (Server Side Request Forgery) in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02923 Published 2018-03-30 No fix listed CWE-918
Open these records in search →