Comdev

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Comdev records in CISA KEV

No Comdev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Comdev Ecommerce 4 records LOW Comdev Web Blogger 3 records LOW Comdev Csv Importer 1 record MEDIUM Comdev Form Designer 1 record LOW Comdev Forum 1 record LOW Comdev Misc Tools 1 record LOW Comdev News Publisher 1 record LOW Comdev One Admin Pro 1 record LOW

Records

4 records in Comdev Ecommerce · all components

TI-2007-02980 CVE-2007-3081 · GHSA-m84v-2393-94pr

PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1…

LOW 36

PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01356 Published 2007-06-06 No fix listed

TI-2005-02408 CVE-2005-2543 · GHSA-653r-9c3r-4265

Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows…

LOW 32

Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05991 Published 2005-08-10 No fix listed

TI-2005-02409 CVE-2005-2544 · GHSA-cfpf-w72c-786x

PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows…

LOW 26

PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the path[docroot] parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01453 Published 2005-08-10 No fix listed

TI-2005-02019 CVE-2005-2138 · GHSA-2q83-hhgc-9wfr

Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the onMouseOver event of an "A" tag in a review messa…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00992 Published 2005-07-05 No fix listed

Open these records in search →

Critical	2
High	9
Medium	5
Low	0
No CVSS	0