CVE-2026-65707 | likeadmin-likeshop Likeshop up to 3.0.5 AdjustAccount Endpoint UserLogic.php adjustAccount money/integral/growth/earnings sql injection

July 24, 2026 Yanac

A vulnerability marked as problematic has been reported in likeadmin-likeshop Likeshop up to 3.0.5. Impacted is the function adjustAccount of the file UserLogic.php of the component AdjustAccount Endpoint. This manipulation of the argument money/integral/growth/earnings causes sql injection.

This vulnerability is handled as CVE-2026-65707. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More