Vulnerabilities

TI-2026-76218 CVE-2026-112035 · GHSA-82w8-27cp-h835

Weak password recovery in aircheng-org iWebShop-5 simple.php

MEDIUM 57

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00346 Published 2026-10-19 No fix listed CWE-640

TI-2026-76217 CVE-2026-112034 · GHSA-c4fr-gp7w-m62j

Open redirect in aircheng-org iWebShop-5 Login Redirect plugin

MEDIUM 57

A weakness has been identified in aircheng-org iWebShop-5 up to 5.16.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00348 Published 2026-10-19 No fix listed CWE-601

TI-2026-76216 CVE-2026-112033 · GHSA-525f-f5h6-hwx8

Cross-site request forgery in iWebShop-5 password change

MEDIUM 57

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00159 Published 2026-10-19 No fix listed CWE-352

TI-2026-76215 CVE-2026-112032 · GHSA-8w69-gvw2-5j38

SQL injection in aircheng-org iWebShop-5 search function

MEDIUM 56

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.0021 Published 2026-10-18 No fix listed CWE-74

TI-2026-59252 CVE-2026-86670 · GHSA-hpxh-78gh-gc5m

aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash

MEDIUM 61

A flaw has been found in aircheng-org iWebShop-5 up to 5.15.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00383 Published 2026-09-08 No fix listed CWE-326

TI-2026-59251 CVE-2026-86669 · GHSA-mcm8-h6h3-g8wf

aircheng-org iWebShop-5 systemseller.php login improper authentication

HIGH 70

A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0069 Published 2026-09-08 No fix listed CWE-287

TI-2026-59250 CVE-2026-86668 · GHSA-m5pf-43p3-3wmv

aircheng-org iWebShop-5 pic.php uploadFile cross site scripting

MEDIUM 63

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0047 Published 2026-09-08 No fix listed CWE-79

TI-2026-59249 CVE-2026-86667 · GHSA-6p7q-grjc-pvgw

aircheng-org iWebShop-5 member.php member_list sql injection

MEDIUM 56

A weakness has been identified in aircheng-org iWebShop-5 up to 5.15.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00349 Published 2026-09-08 No fix listed CWE-74

TI-2026-59248 CVE-2026-86666 · GHSA-7c94-q6r5-fp3h

aircheng-org iWebShop-5 pic.php uploadFile unrestricted upload

HIGH 70

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00538 Published 2026-09-08 No fix listed CWE-284

TI-2026-59247 CVE-2026-86665 · GHSA-r6xp-662f-c339

aircheng-org iWebShop-5 update.php index authorization

HIGH 70

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00538 Published 2026-09-08 No fix listed CWE-862

Vulnerabilities

Filters