CVE-2026-65707

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-65707

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-65707.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-65707

Published

2026-07-24T15:43:35.413Z

Modified

2026-08-12T03:51:34.539663884Z

Severity

8.5 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Likeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpoint

Details

Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitized POST parameters to the adjustAccount endpoint. The adjustAccount method in UserLogic.php concatenates the money, integral, growth, and earnings parameters directly into Db::raw() SQL fragments without type casting, numeric validation, or parameter binding, enabling boolean-based binary-search extraction of credentials, PII, and session tokens via distinct success and failure response messages.

Database specific

{
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65707.json",
    "cna_assigner": "VulnCheck"
}

References

Affected packages

Git / github.com/likeadmin-likeshop/likeshop

Affected ranges

Type

GIT

Repo

https://github.com/likeadmin-likeshop/likeshop

Events

Introduced

Last affected

6f4a7fb2a3893139e50bccd0b4d82ec973ff08dc

Database specific

Show details

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.5"
        }
    ]
}

Affected versions

2.*

2.5.7

3.*

3.0.3

3.0.4

3.0.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-65707.json"