Likeshop Likeshop -

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:likeshop:likeshop:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorLikeshop (17a0bb20-fb88-59bc-9eba-7f1fe81c585f)
ProductLikeshop (422c95c9-fb18-5a17-8943-1a5d675cdf0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitee/likeshop_gitee/likeshop purl2cpe 2026-06-01 10:11:24.036477
pkg:github/likeshop-github/likeshop purl2cpe 2026-06-01 10:11:24.036478

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-41432 vulnerable 2026-06-08 06:43:54.498086 Details available
An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue allows an attacker to replace their real IP address with any arbitrary IP address, specifically by adding a forged 'X-Forwarded' or 'Client-IP' header to requests. Exploiting IP spoofing, attackers can bypass account lockout mechanisms during attempts to log into admin accounts, spoof IP addresses in requests sent to the server, and impersonate IP addresses that have logged into user accounts, etc.
Published: 2024-08-07T00:00:00.000Z
Updated: 2024-08-07T17:31:22.277Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34949 vulnerable 2026-06-08 06:37:35.151105 Details available
SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploited at the /admin/order/lists.html endpoint.
Published: 2024-05-20T17:47:50.073Z
Updated: 2025-02-13T15:53:44.053Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.