Juanpao vulnerabilities
We track 6 vulnerabilities in Juanpao products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on February 7, 2024.
Latest Juanpao vulnerabilities
- 9.8 Critical severity
JPShop: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in Juanpao JPShop up to 1.5.02 and classified as critical. Affected by this vulnerability is the function actionUpdate of the file /api/controllers/common/UploadsController.php. The manipulation of the argument imgage leads to un
- 9.8 Critical severity
JPShop: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in Juanpao JPShop up to 1.5.02. Affected is the function actionUpdate of the file /api/controllers/merchant/shop/PosterController.php of the component API. The manipulation of the argument pic_url le
- 9.8 Critical severity
JPShop: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, has been found in Juanpao JPShop up to 1.5.02. This issue affects the function actionUpdate of the file /api/controllers/merchant/design/MaterialController.php of the component API. The manipulation of the arg
- 9.8 Critical severity
JPShop: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical was found in Juanpao JPShop up to 1.5.02. This vulnerability affects the function actionIndex of the file /api/controllers/merchant/app/ComboController.php of the component API. The manipulation of the argument pic_url le
- 9.8 Critical severity
JPShop: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical has been found in Juanpao JPShop up to 1.5.02. This affects the function actionIndex of the file /api/controllers/admin/app/ComboController.php of the component API. The manipulation of the argument pic_url leads to unres
- 9.8 Critical severity
JPShop: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/controllers/admin/app/AppController.php of the component API. The manipulation of the argument app_pi