Incorrect Permission Assignment for Critical Resource in ShopXO

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-28056 · ADVISORY
• gongfuxiang/shopxo · WEB
• gongfuxiang/shopxo · PACKAGE

shopxo/shopxo のその他の脆弱性

• CVE-2025-28094中 6.5shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places.
• CVE-2025-28093中 6.3ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) in Email Settings.
• CVE-2025-28092中 6.3ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) via image upload function.
• CVE-2024-6524高 8.8A vulnerability was found in ShopXO up to 6.1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionalit…
• CVE-2021-41938高 7.2An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three lo…