Vendors / Ecommerce Corporation Online Ecommerce Corporation Online Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Ecommerce Corporation Online records in CISA KEV No Ecommerce Corporation Online vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 51
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.php, (3) the cat_manufa…
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0517 · Published 2004-03-18 · No fix listed
Priority LOW 37
Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter.
CVSS 2.0 MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04223 · Published 2004-03-18 · No fix listed
Open these records in search → All records by CVSS severity
Critical1 High0 Medium1 Low0 No CVSS0