Gongfuxiang vulnerabilities
We track 2 vulnerabilities in Gongfuxiang products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 16, 2025.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Gongfuxiang vulnerabilities
- 7.2 High severity
schoolcms: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in gongfuxiang schoolcms 2.3.1. This affects the function SaveInfo of the file /index.php?m=Admin&c=article&a=SaveInfo. The manipulation of the argument ID leads to sql injection. It is possible to initiate
- 8.8 High severity
ShopXO: Server-Side Request Forgery
A vulnerability was found in ShopXO up to 6.1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file extend/base/Uploader.php. The manipulation of the argument source leads to server-side request forgery. Th