Likeshop

6 CVEs across 1 Likeshop products. Browse Likeshop vulnerabilities, severities, and proof-of-concept exploits.

Likeshop products with known CVEs

ProductCVEs
Likeshop6
Likeshop CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-41432Medium5.32024-08-07An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue allows an attacker to replace their real IP address with any arbi…
CVE-2024-5766Low2.42024-06-08A vulnerability was found in Likeshop up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin of the component…
CVE-2024-34949High8.22024-05-20SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploite…
CVE-2024-24028Medium5.92024-03-21Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function U…
CVE-2024-24027High7.22024-02-27SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic::getFansLists.
CVE-2024-0352High7.32024-01-09A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the fil…