beikeshop vulnerabilities

Products

• beikeshop 5
• chengdu everbrite network technology 1

Latest beikeshop CVEs

Newest publication first

1. CVE-2026-124576 BeikeShop Guest Order Lookup OrderRepo.php getOrderByNumber behavioral workflow

   Published 2026-11-09

   Medium·CVSS 6.9 EPSS 0.31%

   A security flaw has been discovered in BeikeShop up to 2.0.0.31. Impacted is the function OrderRepo::getOrderByNumber of the file beike/Repositories/OrderRepo.php of the component Guest Order Lookup. Performing a manipulation of the argument order_number results in enforcement of...

2. CVE-2026-111657 BeikeShop through 2.0.0.31 IDOR via RMA mark_as_shipped Endpoint

   Published 2026-10-16

   Medium·CVSS 5.3 EPSS 0.30%

   BeikeShop through 2.0.0.31 contains an insecure direct object reference vulnerability in the markAsShipped handler of RmaController that allows authenticated customers to modify other customers' returns. Attackers can submit sequential RMA ids to the account/rmas/{id}/mark_as_shi...

3. CVE-2024-8165 Chengdu Everbrite Network Technology BeikeShop export exportZip path traversal

   Published 2024-08-26

   Medium·CVSS 5.3 EPSS 0.57%

   A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This vulnerability affects the function exportZip of the file /admin/file_manager/export. Such manipulation of the argument path leads to path traversal. The attack can be launched remot...

4. CVE-2024-8164 Chengdu Everbrite Network Technology BeikeShop FileManagerController.php rename unrestricted upload

   Published 2024-08-26

   Medium·CVSS 5.3 EPSS 0.55%

   A vulnerability was determined in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This affects the function rename of the file /Admin/Http/Controllers/FileManagerController.php. This manipulation of the argument new_name causes unrestricted upload. The attack can be i...

5. CVE-2024-8163 Chengdu Everbrite Network Technology BeikeShop files destroyFiles path traversal

   Published 2024-08-26

   Medium·CVSS 5.3 EPSS 0.84%

   A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/file_manager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attac...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.