Approved changes feed: RSS · Atom

cpe:2.3:a:shipping_100:fahuo100:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorShipping 100 (70fa534d-0492-503a-9d21-3d12421fd497)
ProductFahuo100 (6f15dba8-c8d3-53c1-a2e7-32415e9c835f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-7188 vulnerable 2026-06-08 06:21:57.212902 Shipping 100 Fahuo100 login.php sql injection
MEDIUM (5)
A vulnerability classified as critical has been found in Shipping 100 Fahuo100 up to 1.1. Affected is an unknown function of the file member/login.php. The manipulation of the argument M_pwd leads to sql injection. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. VDB-249390 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-12-31T14:31:03.814Z
Updated: 2024-08-26T20:19:44.616Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.