E-commerce Website Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

E-commerce Website Project records in CISA KEV

No E-commerce Website Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

E-commerce Website 4 records MEDIUM

Records

4 records in E-commerce Website · all components

TI-2021-07467 CVE-2021-25207 · GHSA-7gg5-39fj-43rh

Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows…

MEDIUM 46

Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file upload to prodViewUpdate.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01874 Published 2021-07-23 No fix listed CWE-434

TI-2021-07465 CVE-2021-25205 · GHSA-fx3v-8fpc-vc6w

SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote…

MEDIUM 45

SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php .

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01476 Published 2021-07-22 No fix listed CWE-89

TI-2022-10407 CVE-2022-27330 · GHSA-g2j4-jfq5-7w27

A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_product of…

LOW 25

A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_product of E-Commerce Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Title…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00562 Published 2022-05-03 No fix listed CWE-79

TI-2021-07464 CVE-2021-25204 · GHSA-xvjf-3q8p-7pjv

Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0…

LOW 25

Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedback_process.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00658 Published 2021-07-23 No fix listed CWE-79

Open these records in search →

Critical	2
High	0
Medium	2
Low	0
No CVSS	0