Ecshop

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Ecshop records in CISA KEV

No Ecshop vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ecshop 1 record LOW Epshop 1 record LOW

Records

1 record in Ecshop · all components

TI-2009-01538 CVE-2009-1622 · GHSA-qcrq-qp6w-6pf9

SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to…

LOW 35

SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the order_sn parameter in an order_query action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01084 Published 2009-05-12 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0