aircheng-org has 10 CVEs on record. Disclosure cadence is accelerating: 10 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 6. The median CVSS is 4.7 (medium). None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.7
- Publish → KEV
- —
- Last 90 days
- 10 prev 0
Worst active — by depth score
CVE-2026-86669High· 7.3A vulnerability was detected in aircheng-org iWebShop-5 up to 5.1552CVE-2026-86666High· 7.3A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.1552CVE-2026-86665High· 7.3A vulnerability was identified in aircheng-org iWebShop-5 up to 5.1552CVE-2026-112035Medium· 6.3aircheng-org iWebShop-5 simple.php send_message_mobile password recovery47CVE-2026-112032Medium· 4.7aircheng-org iWebShop-5 util.php search sql injection38
aircheng-org vulnerabilities
CVEs affecting aircheng-org, newest first. Open any entry for full detail, references, and exploit status.
10 CVEsRSS
CVE-2026-112034Medium· 4.3PoCaircheng-org iWebShop-5 Login Redirect _userInfo.php redirect
A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. The impacted element is the function IController::redirect of the file plugins/_userInfo/_userInfo.php of the component Login Redirect. This manipulation of the argume…
CVE-2026-112035Medium· 6.3PoCaircheng-org iWebShop-5 simple.php send_message_mobile password recovery
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function send_message_mobile of the file controllers/simple.php. Such manipulation of the argument user_id leads to weak password recovery…
CVE-2026-112033Medium· 4.3PoCaircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery
A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function admin_repwd/admin_repwd_act of the file controllers/system.php of the component Password Change. The manipulation of the argu…
CVE-2026-112032Medium· 4.7PoCaircheng-org iWebShop-5 util.php search sql injection
A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploi…
CVE-2026-86670Low· 3.7PoCA flaw has been found in aircheng-org iWebShop-5 up to 5.15
A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to passwo…
CVE-2026-86669High· 7.3PoCA vulnerability was detected in aircheng-org iWebShop-5 up to 5.15
A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possib…
CVE-2026-86668Medium· 4.3PoCA security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted element is the function uploadFile of the file controllers/pic.php. Such manipulation of the argument outerSrc/selectPhoto leads to cross site…
CVE-2026-86667Medium· 4.7PoCA weakness has been identified in aircheng-org iWebShop-5 up to 5.15
A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possi…
CVE-2026-86666High· 7.3PoCA security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15
A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload_json/uploadFile of the file controllers/pic.php. The manipulation results in unrestricted upload. The attack can be executed remot…
CVE-2026-86665High· 7.3PoCA vulnerability was identified in aircheng-org iWebShop-5 up to 5.15
A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of the file controllers/update.php. The manipulation leads to missing authorization. Remote exploitation of the attack is…