Laiketui

8 CVEs across 1 Laiketui products. Browse Laiketui vulnerabilities, severities, and proof-of-concept exploits.

Laiketui products with known CVEs

ProductCVEs
Laiketui8
Laiketui CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-4988Medium6.32023-09-15A vulnerability, which was classified as problematic, was found in Bettershop LaikeTui. This affects an unknown part of the file index.php?module=system&action…
CVE-2023-4559Medium6.32023-08-27A vulnerability, which was classified as critical, has been found in Bettershop LaikeTui. Affected by this issue is some unknown functionality of the file inde…
CVE-2021-40956High7.52022-06-23LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained.
CVE-2021-40955High7.22022-06-23SQL injection exists in LaiKetui v3.5.0 the background administrator list.
CVE-2021-40954Critical9.82022-06-23Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code.
CVE-2020-19159High8.82021-09-15Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=member&action=add'.
CVE-2021-34129High8.12021-06-15LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an at…
CVE-2021-34128High8.82021-06-15LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP archive containing a…