Vulnerabilities

TI-2020-13671 CVE-2020-19672 · GHSA-qqrr-xxx3-8f48

Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain…

MEDIUM 45

Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01347 Published 2020-09-30 No fix listed CWE-434

TI-2020-13670 CVE-2020-19670 · GHSA-95gm-vqqp-xfhw

In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed…

LOW 24

In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00872 Published 2020-09-30 No fix listed CWE-306

TI-2019-12277 CVE-2019-16310 · GHSA-rrjp-2wxh-fqgp

NIUSHOP V1.11 has XSS via the index.php?s=/admin URI.

LOW 25

NIUSHOP V1.11 has XSS via the index.php?s=/admin URI.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00637 Published 2019-09-14 No fix listed CWE-79

TI-2019-12278 CVE-2019-16311 · GHSA-7xxr-r8q5-wrcv

NIUSHOP V1.11 has CSRF via search_info to index.php.

LOW 39

NIUSHOP V1.11 has CSRF via search_info to index.php.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00603 Published 2019-09-14 No fix listed CWE-352

Vulnerabilities

Filters

Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain…

In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed…

NIUSHOP V1.11 has XSS via the index.php?s=/admin URI.

NIUSHOP V1.11 has CSRF via search&#95;info to index.php.

NIUSHOP V1.11 has CSRF via search_info to index.php.