FKIE_CVE-2026-11480

Vulnerability from fkie_nvd - Published: 2026-06-08 03:16 - Updated: 2026-07-23 07:10
Severity
6.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Summary
A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. Impacted is an unknown function of the file beike/Admin/Routes/admin.php of the component Admin Design Builder Endpoint. Performing a manipulation of the argument settings.value results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 2fa9805411088069fcc3b0c15b2f1f33d6e09958. To fix this issue, it is recommended to deploy a patch.
References
cna@vuldb.comhttps://anonymous.4open.science/r/beikeshop-4B75/second-order-sqli-report.md
cna@vuldb.comhttps://github.com/beikeshop/beikeshop/commit/2fa9805411088069fcc3b0c15b2f1f33d6e09958
cna@vuldb.comhttps://vuldb.com/cve/CVE-2026-11480
cna@vuldb.comhttps://vuldb.com/submit/833973
cna@vuldb.comhttps://vuldb.com/vuln/369100
cna@vuldb.comhttps://vuldb.com/vuln/369100/cti
Impacted products
Vendor Product Version
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:chengdu_everbrite_network_technology:beikeshop:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Admin Design Builder Endpoint"
          ],
          "product": "BeikeShop",
          "vendor": "Chengdu Everbrite Network Technology",
          "versions": [
            {
              "status": "affected",
              "version": "1.6.0.0"
            },
            {
              "status": "affected",
              "version": "1.6.0.1"
            },
            {
              "status": "affected",
              "version": "1.6.0.2"
            },
            {
              "status": "affected",
              "version": "1.6.0.3"
            },
            {
              "status": "affected",
              "version": "1.6.0.4"
            },
            {
              "status": "affected",
              "version": "1.6.0.5"
            },
            {
              "status": "affected",
              "version": "1.6.0.6"
            },
            {
              "status": "affected",
              "version": "1.6.0.7"
            },
            {
              "status": "affected",
              "version": "1.6.0.8"
            },
            {
              "status": "affected",
              "version": "1.6.0.9"
            },
            {
              "status": "affected",
              "version": "1.6.0.10"
            },
            {
              "status": "affected",
              "version": "1.6.0.11"
            },
            {
              "status": "affected",
              "version": "1.6.0.12"
            },
            {
              "status": "affected",
              "version": "1.6.0.13"
            },
            {
              "status": "affected",
              "version": "1.6.0.14"
            },
            {
              "status": "affected",
              "version": "1.6.0.15"
            },
            {
              "status": "affected",
              "version": "1.6.0.16"
            },
            {
              "status": "affected",
              "version": "1.6.0.17"
            },
            {
              "status": "affected",
              "version": "1.6.0.18"
            },
            {
              "status": "affected",
              "version": "1.6.0.19"
            },
            {
              "status": "affected",
              "version": "1.6.0.20"
            },
            {
              "status": "affected",
              "version": "1.6.0.21"
            },
            {
              "status": "affected",
              "version": "1.6.0.22"
            }
          ]
        }
      ],
      "source": "cna@vuldb.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. Impacted is an unknown function of the file beike/Admin/Routes/admin.php of the component Admin Design Builder Endpoint. Performing a manipulation of the argument settings.value results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 2fa9805411088069fcc3b0c15b2f1f33d6e09958. To fix this issue, it is recommended to deploy a patch."
    },
    {
      "lang": "es",
      "value": "Se encontr\u00f3 una vulnerabilidad en Chengdu Everbrite Network Technology BeikeShop hasta 1.6.0.22. Afectada es una funci\u00f3n desconocida del archivo beike/Admin/Routes/admin.php del componente Admin Design Builder Endpoint. Realizar una manipulaci\u00f3n del argumento settings.value resulta en inyecci\u00f3n SQL. Es posible iniciar el ataque remotamente. El exploit ha sido hecho p\u00fablico y podr\u00eda ser usado. El parche es nombrado 2fa9805411088069fcc3b0c15b2f1f33d6e09958. Para corregir este problema, se recomienda desplegar un parche."
    }
  ],
  "id": "CVE-2026-11480",
  "lastModified": "2026-07-23T07:10:00.113",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "cna@vuldb.com",
        "type": "Secondary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 6.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.4,
        "source": "cna@vuldb.com",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 2.1,
          "baseSeverity": "LOW",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "PROOF_OF_CONCEPT",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "LOW",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "LOW",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "cna@vuldb.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-11480",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-06-08T13:00:45.863398Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-06-08T03:16:20.363",
  "references": [
    {
      "source": "cna@vuldb.com",
      "url": "https://anonymous.4open.science/r/beikeshop-4B75/second-order-sqli-report.md"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://github.com/beikeshop/beikeshop/commit/2fa9805411088069fcc3b0c15b2f1f33d6e09958"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://vuldb.com/cve/CVE-2026-11480"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://vuldb.com/submit/833973"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://vuldb.com/vuln/369100"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://vuldb.com/vuln/369100/cti"
    }
  ],
  "sourceIdentifier": "cna@vuldb.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-74"
        },
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ],
      "source": "cna@vuldb.com",
      "type": "Secondary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.