Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Tp-shop Clear all filters
TI-2018-07029 CVE-2018-9919 · GHSA-8mqr-gh66-wpgv

A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8…

Priority MEDIUM 50

A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution, b…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04662 Published 2018-05-02 No fix listed CWE-918
TI-2017-12225 CVE-2017-16614 · GHSA-c6w3-g6h7-fp2f

SSRF (Server Side Request Forgery) in tpshop 2.0.5 and 2.0.6 allows remote attackers to…

Priority MEDIUM 47

SSRF (Server Side Request Forgery) in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02923 Published 2018-03-30 No fix listed CWE-918