<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: beikeshop</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-8165: A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5</title><link>https://patchthecve.com/cve/CVE-2024-8165.html</link><guid>https://patchthecve.com/cve/CVE-2024-8165.html</guid><pubDate>Wed, 17 Jun 2026 08:22:01 +0000</pubDate><description>MEDIUM 4.3: A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This vulnerability affects the function exportZip of the file /admin/file_manager/export. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit is </description></item><item><title>CVE-2024-8164: A vulnerability was determined in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5</title><link>https://patchthecve.com/cve/CVE-2024-8164.html</link><guid>https://patchthecve.com/cve/CVE-2024-8164.html</guid><pubDate>Wed, 17 Jun 2026 08:22:01 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was determined in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This affects the function rename of the file /Admin/Http/Controllers/FileManagerController.php. This manipulation of the argument new_name causes unrestricted upload. The attack can be initiated remotely. T</description></item><item><title>CVE-2024-8163: A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5</title><link>https://patchthecve.com/cve/CVE-2024-8163.html</link><guid>https://patchthecve.com/cve/CVE-2024-8163.html</guid><pubDate>Wed, 17 Jun 2026 08:22:01 +0000</pubDate><description>MEDIUM 5.4: A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/file_manager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The expl</description></item></channel></rss>