📦 Likeshop

This SQL injection vulnerability in Likeshop allows attackers to execute arbitrary SQL commands through the OrderLogic::getOrderList function at the /admin/order/lists.html endpoint. Attackers can pot...

This critical vulnerability in Likeshop allows attackers to upload arbitrary files without restrictions via the FileServer::userFormImage function. Remote attackers can exploit this to upload maliciou...

This CVE describes an IP spoofing vulnerability in Likeshop that allows attackers to forge X-Forwarded or Client-IP headers to bypass IP-based security controls. Attackers can circumvent admin account...