Likeshop vulnerabilities

3 known vulnerabilities in Likeshop from Likeshop. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  likeshop: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-34949May 20, 2024Likeshop

  SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploited at the /admin/order/lists.html endpoint.

• 7.2 High severity

  likeshop: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-24027Feb 27, 2024Likeshop

  SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic::getFansLists.

• 9.8 Critical severity

  Likeshop: Unrestricted Upload of File with Dangerous Type

  CVE-2024-0352Jan 9, 2024LikeshopEPSS 72.9%

  A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipula