← All advisories

Critical severityNVD Advisory· Published May 2, 2022· Updated Aug 3, 2024

CVE-2022-28056

CVE-2022-28056

Description

ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
shopxo/shopxoPackagist	< 2.2.6	2.2.6

Affected products

2

ShopXO/ShopXOdescription
ghsa-coords
pkg:composer/shopxo/shopxo
Range: < 2.2.6

Patches

Vulnerability mechanics

References

3

github.com/advisories/GHSA-jfph-3hpg-2f65ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-28056ghsaADVISORY
github.com/gongfuxiang/shopxo/issues/66ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.