ShopXO 1.2.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:shopxo:shopxo:1.2.0:*:*:*:*:*:*:*

part: a version: 1.2.0 update: *

VendorShopxo (f950a7f4-3480-5d75-ba3a-24a53b4f0105)
ProductShopxo (338ac788-d307-5f19-9bb4-a93575614b70)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/gongfuxiang/shopxo purl2cpe 2026-06-01 10:10:58.214262

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5887 vulnerable 2026-06-08 05:14:08.203745 Details available
An issue was discovered in ShopXO 1.2.0. In the UnlinkDir method of the FileUtil.php file, the input parameters are not checked, resulting in input mishandling by the rmdir method. Attackers can delete arbitrary files by using "../" directory traversal.
Published: 2019-01-10T14:00:00.000Z
Updated: 2024-08-04T20:09:23.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5886 vulnerable 2026-06-08 05:14:08.203244 Details available
An issue was discovered in ShopXO 1.2.0. In the application\install\controller\Index.php file, there is no validation lock file in the Add method, which allows an attacker to reinstall the database. The attacker can write arbitrary code to database.php during system reinstallation.
Published: 2019-01-10T14:00:00.000Z
Updated: 2024-08-04T20:09:23.782Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.