Skip to content
OpenAdvisories

Vendor

4xmen

2 known vulnerabilities.

Products

pm2panel 1 xshop 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-49849

    xShop: Unrestricted File Upload in File Attachment Module in Admin panel leads to Arbitrary Code Execution

    xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allows an authenticated administrator to upload executable files (e.g., .php). By uploading a specially crafted php file, an attacker can achie…

    4xmen xshop