Advisories · Technology
aircheng-org iWebShop-5.
Every CVE that names aircheng-org iWebShop-5 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
aircheng-org iWebShop-5 simple.php send_message_mobile password recovery
- aircheng-org iWebShop-5
- CWE-640
- CVSS 5.3 Medium
aircheng-org iWebShop-5 Login Redirect _userInfo.php redirect
- aircheng-org iWebShop-5
- Open redirect
- CVSS 5.3 Medium
aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery
- aircheng-org iWebShop-5
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 5.1 Medium
aircheng-org iWebShop-5 util.php search sql injection
- aircheng-org iWebShop-5
- Other injection
- SQL injection
- CVSS 6.3 Medium
aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
- aircheng-org iWebShop-5
- Weak cryptography or TLS
- CVSS 6.9 Medium
aircheng-org iWebShop-5 systemseller.php login improper authentication
- aircheng-org iWebShop-5
- Authentication bypass
- CVSS 5.3 Medium
aircheng-org iWebShop-5 pic.php uploadFile cross site scripting
- aircheng-org iWebShop-5
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
aircheng-org iWebShop-5 member.php member_list sql injection
- aircheng-org iWebShop-5
- Other injection
- SQL injection
- CVSS 6.9 Medium
aircheng-org iWebShop-5 pic.php uploadFile unrestricted upload
- aircheng-org iWebShop-5
- Broken access control
- Unrestricted file upload
- CVSS 6.9 Medium
aircheng-org iWebShop-5 update.php index authorization
- aircheng-org iWebShop-5
- Broken access control