iWebShop-5 vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

IW

Product

iWebShop-5

by aircheng-org · last CVE Oct 19, 2026

10

CVEs

0

On KEV

7.3

Max CVSS

4

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 0High 3Medium 6Low 1

Severity

All severities10 Critical0 High3 Medium6 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add iWebShop-5 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-86669	7.3	1%	Sep 8	aircheng-org iWebShop-5 systemseller.php login improper authentication Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +10 more
CVE-2026-86666	7.3	1%	Sep 8	aircheng-org iWebShop-5 pic.php uploadFile unrestricted upload Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +10 more
CVE-2026-86665	7.3	1%	Sep 8	aircheng-org iWebShop-5 update.php index authorization Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +10 more
CVE-2026-112035	6.3	0%	Oct 19	aircheng-org iWebShop-5 simple.php send_message_mobile password recovery Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +11 more
CVE-2026-112032	4.7	0%	Oct 18	aircheng-org iWebShop-5 util.php search sql injection Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +11 more
CVE-2026-86667	4.7	0%	Sep 8	aircheng-org iWebShop-5 member.php member_list sql injection Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +10 more
CVE-2026-112034	4.3	0%	Oct 19	aircheng-org iWebShop-5 Login Redirect _userInfo.php redirect Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +11 more
CVE-2026-112033	4.3	0%	Oct 19	aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +11 more
CVE-2026-86668	4.3	0%	Sep 8	aircheng-org iWebShop-5 pic.php uploadFile cross site scripting Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +10 more
CVE-2026-86670	3.7	0%	Sep 8	aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +10 more