PHPSHE 1.7
Approved changes feed: RSS · Atom
cpe:2.3:a:phpshe:phpshe:1.7:*:*:*:*:*:*:*
part: a version: 1.7 update: *
| Vendor | Phpshe (955fec63-e1db-5921-a5ab-22b025629ef1) |
|---|---|
| Product | Phpshe (e86e6823-922a-5b84-a7e6-627b13c1537c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-19165 |
vulnerable | 2026-06-08 05:20:57.201938 |
Details available
PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevel_id=1 userlevel_id[] parameter.
Published: 2020-12-11T19:02:01.000Z
Updated: 2024-08-04T14:08:30.789Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18215 |
vulnerable | 2026-06-08 05:20:56.908656 |
Details available
Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the (1) ad_id, (2) menu_id, and (3) cashout_id parameters, which could let a remote malicious user execute arbitrary code.
Published: 2021-02-09T18:56:32.000Z
Updated: 2024-08-04T14:00:49.253Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9762 |
vulnerable | 2026-06-08 05:14:26.213145 |
Details available
A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication.
Published: 2019-03-14T01:00:00.000Z
Updated: 2024-08-04T22:01:54.119Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9761 |
vulnerable | 2026-06-08 05:14:26.212807 |
Details available
An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs because of the call to wechat_getxml in include/plugin/payment/wechat/notify_url.php.
Published: 2019-03-14T01:00:00.000Z
Updated: 2024-08-04T22:01:54.149Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9626 |
vulnerable | 2026-06-08 05:14:25.865366 |
Details available
PHPSHE 1.7 allows module/index/cart.php pintuan_id SQL Injection to index.php.
Published: 2019-03-07T15:00:00.000Z
Updated: 2024-09-16T19:31:20.441Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6708 |
vulnerable | 2026-06-08 05:14:13.001979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6707 |
vulnerable | 2026-06-08 05:14:13.001482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18486 |
vulnerable | 2026-06-08 05:11:14.124957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18485 |
vulnerable | 2026-06-08 05:11:14.124571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.