漏洞列表

按严重度 / 渠道 / 厂商 / 时间筛选公开漏洞条目。

按严重度筛选严重高危中危低危 CISA KEV 在册

软件类别办公软件生产软件 Web 应用

可利用性 PRO 可利用（在野）有 PoC 未确认了解付费接入 →

清除全部筛选

Joomla! Component Easy Shop 1.2.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by supplying base64-encoded file paths. Attackers can sen…

中危 6.2

CVE-2019-25760 · 2026-08-21 · auto

Joomla! Component Easy Shop 1.2.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by supplying base64-encoded file paths. Attackers can send GET requests to ind…

PHP-SHOP 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to add administrative users by crafting malicious HTML forms. Attackers can trick authenticated …

中危 5.3

CVE-2018-25397 · 2026-07-21 · draft

PHP-SHOP 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to add administrative users by crafting malicious HTML forms. Attackers can trick authenticated administrators into v…