Aircheng-org vulnerabilities
We track 3 vulnerabilities in Aircheng-org products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 8, 2026.
Latest Aircheng-org vulnerabilities
- 7.3 High severity
iWebShop-5: Improper Authentication
A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the atta
- 7.3 High severity
iWebShop-5: Improper Access Control
A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload_json/uploadFile of the file controllers/pic.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit has be
- 7.3 High severity
iWebShop-5: Missing Authorization
A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of the file controllers/update.php. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The exploit