LA
Product
Laiketui
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 0Low 0
Watch
Add Laiketui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4988 | 9.8 | Sep 15 | A vulnerability, which was classified as problematic, was found in Bettershop LaikeTui Affected: All versions, or not specified |
| CVE-2023-4559 | 9.8 | Aug 27 | A vulnerability, which was classified as critical, has been found in Bettershop LaikeTui Affected: All versions, or not specified |
| CVE-2021-40954 | 9.8 | Jun 23 | Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code Affected: 3.5.0 |
| CVE-2020-19159 | 8.8 | Sep 15 | Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=member&action=add' Affected: 3.0 |
| CVE-2021-34128 | 8.8 | Jun 15 | LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP archive containing a .php file, as… Affected: 3.5.0 |
| CVE-2021-34129 | 8.1 | Jun 15 | LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an attacker-controlled… Affected: 3.5.0 |
| CVE-2021-40956 | 7.5 | Jun 23 | LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained Affected: 3.5.0 |
| CVE-2021-40955 | 7.2 | Jun 23 | SQL injection exists in LaiKetui v3.5.0 the background administrator list Affected: 3.5.0 |
Showing 8
