Back to Database
Status published
Critical
CVE-2020-19672
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator...
Vulnerability Description
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-19672
Credits & Attribution
No credits recorded in the NVD database.
More from niushop
View All →CVE-2020-19670
In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be...
Medium
4.9
CVE-2019-16311
NIUSHOP V1.11 has CSRF via search_info to index.php....
High
8.8
CVE-2019-16310
NIUSHOP V1.11 has XSS via the index.php?s=/admin URI....
Medium
5.4
CVE-2018-14570
A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business...
High
8.8
Affected Vendor
niushop
View all reports →Affected Software
niushop
Vulnerable Versions:
1.11
Timeline
Official Publish:
September 30th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.