CVE-2019-9762

CRITICAL 9.8CVE-2019-9762 · Published 14/03/2019 · updated 17/06/2026

In short

CVE-2019-9762 is a CRITICAL (CVSS 9.8) vulnerability affecting phpshe (phpshe).
Chance of exploitation in the next 30 days (EPSS): 5.9%, higher than 93.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpshe phpshe	`= 1.7`	No fix yet

Description

A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication.

References

gitee.com/koyshe/phpshe/issues/ITC0C · Exploit

More vulnerabilities in phpshe

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free