TI-2023-04593 CVE-2023-4988 · GHSA-vxcc-m889-8f2g
Bettershop LaikeTui unrestricted upload
Priority MEDIUM 43
A vulnerability, which was classified as problematic, was found in Bettershop LaikeTui.
Vulnerabilities
8 records
TI-2023-04205 CVE-2023-4559 · GHSA-pwhj-hwcf-cjx5
Bettershop LaikeTui POST Request unrestricted upload
Priority MEDIUM 43
A vulnerability, which was classified as critical, has been found in Bettershop LaikeTui.
TI-2021-17839 CVE-2021-40956 · GHSA-hpqf-rxw9-hcf9
LaiKetui v3.5.0 has SQL injection in the background through the menu management function…
Priority LOW 35
LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained.
TI-2021-17838 CVE-2021-40955 · GHSA-3jfq-3r5r-8hmh
SQL injection exists in LaiKetui v3.5.0 the background administrator list.
Priority LOW 34
SQL injection exists in LaiKetui v3.5.0 the background administrator list.
TI-2021-17837 CVE-2021-40954 · GHSA-vv4r-q569-qf8p
Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an…
Priority MEDIUM 46
Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code.
TI-2020-13547 CVE-2020-19159 · GHSA-vcgj-gpwm-3pjp
Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute…
Priority MEDIUM 40
Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=member&action=add'.
TI-2021-13282 CVE-2021-34128 · GHSA-q4jj-x7h4-55rf
LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using…
Priority MEDIUM 41
LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP archive containing a .php file, as demonstrated by the ../../../../phpinfo.php pa…
TI-2021-13283 CVE-2021-34129 · GHSA-fgfw-fhxh-8r43
LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as…
Priority LOW 39
LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an attacker-controlled manner.