Ectouch

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ectouch records in CISA KEV

No Ectouch vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2023-20687 CVE-2023-39560 · GHSA-cwpx-h68q-f42j

MEDIUM 56

ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id'] parameter at \default\helpers\insert.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04684 Published 2023-08-28 No fix listed CWE-89

TI-2020-14167 CVE-2020-21806 · GHSA-p634-mhpc-5857

MEDIUM 44

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php..

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01162 Published 2021-07-27 No fix listed CWE-89

TI-2020-13323 CVE-2020-18144 · GHSA-v3fc-3m3g-pfx8

MEDIUM 44

SQL Injection Vulnerability in ECTouch v2 via the integral_min parameter in index.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01138 Published 2021-07-14 No fix listed CWE-89

TI-2022-08840 CVE-2022-25098 · GHSA-ph62-8768-r87v

MEDIUM 41

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00987 Published 2022-02-23 No fix listed