Likeshop vulnerabilities
We track 3 vulnerabilities in Likeshop products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 20, 2024.
Latest Likeshop vulnerabilities
- 8.2 High severity
likeshop: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploited at the /admin/order/lists.html endpoint.
- 7.2 High severity
likeshop: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic::getFansLists.
- 9.8 Critical severity
Likeshop: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipula