Skip to content

Vendor

7-card vulnerabilities

4 published CVES affecting 7-card, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
4
Critical
0
High
4
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of 7-card alerts

Products

Latest 7-card CVEs

Newest publication first

  1. CVE-2023-7186 7-card Fakabao notify.php sql injection

    Published
    HighCVSS 8.8 EPSS 0.48%

    A vulnerability was found in 7-card Fakabao up to 1.0_build20230805. It has been declared as critical. This vulnerability affects unknown code of the file member/notify.php. The manipulation of the argument out_trade_no leads to sql injection. The exploit has been disclosed to th...

  2. CVE-2023-7185 7-card Fakabao wxpay_notify.php sql injection

    Published
    HighCVSS 8.8 EPSS 0.55%

    A vulnerability was found in 7-card Fakabao up to 1.0_build20230805. It has been classified as critical. This affects an unknown part of the file shop/wxpay_notify.php. The manipulation of the argument out_trade_no leads to sql injection. The exploit has been disclosed to the pub...

  3. CVE-2023-7184 7-card Fakabao notify.php sql injection

    Published
    HighCVSS 8.8 EPSS 0.55%

    A vulnerability was found in 7-card Fakabao up to 1.0_build20230805 and classified as critical. Affected by this issue is some unknown functionality of the file shop/notify.php. The manipulation of the argument out_trade_no leads to sql injection. The exploit has been disclosed t...

  4. CVE-2023-7183 7-card Fakabao alipay_notify.php sql injection

    Published
    HighCVSS 8.8 EPSS 0.58%

    A vulnerability has been found in 7-card Fakabao up to 1.0_build20230805 and classified as critical. Affected by this vulnerability is an unknown functionality of the file shop/alipay_notify.php. The manipulation of the argument out_trade_no leads to sql injection. The exploit ha...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.