Read the docs

Cpcommerce Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Cpcommerce Project records in CISA KEV

No Cpcommerce Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Cpcommerce · all components

Priority HIGH 82

_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.51897 Published 2009-06-05 No fix listed CWE-22
Open these records in search →