DSShop vulnerabilities
2 known vulnerabilities in DSShop from DeShang. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
DSShop: Path Traversal: '../filedir'
A vulnerability, which was classified as critical, was found in DeShang DSShop up to 2.1.5. This affects an unknown part of the file application/home/controller/MemberAuth.php. The manipulation of the argument member_info leads to path traversal: '../filedir'.
- 9.8 Critical severity
DSShop: Improper Access Control
A vulnerability was found in DeShang DSShop up to 3.1.0. It has been declared as problematic. This vulnerability affects unknown code of the file public/install.php of the component HTTP GET Request Handler. The manipulation leads to improper access controls.