Read the docs

Alegrocart

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Alegrocart records in CISA KEV

No Alegrocart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Alegrocart 4 records LOW

Records

4 records

TI-2015-07607 CVE-2015-9227 · GHSA-2g6r-mhp9-27w3

PHP remote file inclusion vulnerability in the get_file function in…

Priority LOW 36

PHP remote file inclusion vulnerability in the get_file function in upload/admin2/controller/report_logs.php in AlegroCart 1.2.8 allows remote administrators to execute arbitrary PHP code via a URL in the file_path param…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02463 Published 2017-09-11 No fix listed CWE-94
TI-2015-07606 CVE-2015-9226 · GHSA-h2m6-hwwx-w627

Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to…

Priority LOW 36

Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute arbitrary SQL commands via the download parameter in the (1) check_download and possibly (2) check_filename function in up…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01981 Published 2017-09-11 No fix listed CWE-89
TI-2010-01555 CVE-2010-1611 · GHSA-74vg-8j35-j89h

Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 allows remote attackers…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 allows remote attackers to hijack the authentication of the administrator for requests that reset the administrator password via a POST to admin/ with an…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01017 Published 2010-04-29 No fix listed CWE-352
Open these records in search →