Approved changes feed: RSS · Atom

cpe:2.3:a:haokekeji:yiqiniu:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHaokekeji (426b2045-e4ef-593a-a81c-73ae3f87851f)
ProductYiqiniu (f67a5a48-08a4-579d-a6cc-c10ea161aee3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0510 vulnerable 2026-06-08 06:22:01.256276 HaoKeKeJi YiQiNiu Api.php http_post server-side request forgery
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in HaoKeKeJi YiQiNiu up to 3.1. Affected by this issue is the function http_post of the file /application/pay/controller/Api.php. The manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250652.
Published: 2024-01-13T22:00:06.410Z
Updated: 2025-11-04T18:22:27.899Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.