CVE-2019-9761 | BDVDB-2026-113721 Detail

Description#

An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs because of the call to wechat_getxml in include/plugin/payment/wechat/notify_url.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://gitee.com/koyshe/phpshe/issues/ITC0C

Exploit#

No public exploit known

History#

Version 12019-03-14Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.