Skip to content
OpenAdvisories

Vendor

likeadmin-likeshop

2 known vulnerabilities.

Products

likeshop 1 likeadmin_php 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-65707

    Likeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpoint

    Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitized POST parameters to the adjustAccount endpoint. The adjustAccount method in UserLogic.ph…

    likeadmin-likeshop likeshop
  • Medium 4.7
    CVE-2026-7083

    likeadmin-likeshop likeadmin_php dataTable Admin API DataTableLists.php queryResult sql injection

    A vulnerability has been found in likeadmin-likeshop likeadmin_php up to 1.9.6. Affected by this issue is the function queryResult of the file server\app\adminapi\lists\tools\DataTableLists.php of the component dataTable Admin API. The manipulation leads to s…

    likeadmin-likeshop likeadmin_php