CVE-2019-9762

CRITICAL EXPLOITED NUCLEI

PHPSHE 1.7 - SQL Injection

Title source: llm

Description

A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication.

Exploits (1)

gitee WRITEUP 48 stars

by koyshe · phpwriteup

https://gitee.com/koyshe/phpshe/issues/ITC0C

View Code ZIP pw:eip

Nuclei Templates (1)

PHPSHE 1.7 - SQL Injection

CRITICALVERIFIEDby DhiyaneshDK

FOFA: app="PHPSHE"

References (1)

[Exploit, Third Party Advisory] https://gitee.com/koyshe/phpshe/issues/ITC0C

Scores

CVSS v3 9.8

EPSS 0.5352

EPSS Percentile 98.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2024-04-21

CWE

CWE-89

Status published

Products (1)

phpshe/phpshe 1.7

Published Mar 14, 2019

Tracked Since Feb 18, 2026