‹ Back to list

Aircheng-org

Aircheng-org Iwebshop-5: vulnerabilities and CVEs

Aircheng-org Iwebshop-5 has 4 published vulnerabilities, 4 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs4
Last 12 months4
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-112035Low (2.1)0.28%—Oct 18, 2026
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function send_message_mobile of the file controllers/simple.php. Such manipulation of the argument user_id leads to weak…
CVE-2026-112034Low (2.1)0.35%—Oct 18, 2026
A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. The impacted element is the function IController::redirect of the file plugins/_userInfo/_userInfo.php of the component Login Redirect. This…
CVE-2026-112033Low (2.1)0.16%—Oct 18, 2026
A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function admin_repwd/admin_repwd_act of the file controllers/system.php of the component Password Change. The…
CVE-2026-112032Low (2)0.33%—Oct 18, 2026
A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1203 Exploitation for Client Execution2
  2. T1210 Exploitation of Remote Services2
  3. T1005 Data from Local System1
  4. T1078 Valid Accounts1
  5. T1185 Browser Session Hijacking1
  6. T1566.002 Spearphishing Link1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.