Vulnerabilities > Niushop > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-01-26 CVE-2024-0933 Unrestricted Upload of File with Dangerous Type vulnerability in Niushop B2B2C Multi-Business 5.0
A vulnerability was found in Niushop B2B2C V5 and classified as critical.
network
low complexity
niushop CWE-434
critical
9.8
2020-09-30 CVE-2020-19672 Unrestricted Upload of File with Dangerous Type vulnerability in Niushop 1.11
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell.
network
low complexity
niushop CWE-434
critical
9.8