Shopwind

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Shopwind records in CISA KEV

No Shopwind vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Shopwind 7 records MEDIUM

Records

7 records

TI-2022-12634 CVE-2022-30453 · GHSA-g3h6-4qq9-9qmq

ShopWind <= 3.4.2 has a RCE vulnerability in Database.php

MEDIUM 58

ShopWind <= 3.4.2 has a RCE vulnerability in Database.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15697 Published 2022-05-11 No fix listed

TI-2024-01585 CVE-2024-1705 · GHSA-5g46-qxcm-rg25

Shopwind Installation DefaultController.php actionCreate code injection

LOW 36

A vulnerability was found in Shopwind up to 4.6.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00594 Published 2024-02-21 No fix listed CWE-94

TI-2022-12633 CVE-2022-30452 · GHSA-qhmv-2gvv-v95g

ShopWind <= v3.4.2 has a Sql injection vulnerability in Database.php

LOW 34

ShopWind <= v3.4.2 has a Sql injection vulnerability in Database.php

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01011 Published 2022-05-11 No fix listed CWE-89

TI-2022-12371 CVE-2022-30059 · GHSA-jmvp-7376-q7jq

Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the…

LOW 31

Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01173 Published 2022-05-11 No fix listed CWE-22

TI-2022-21149 CVE-2022-43321 · GHSA-wwfc-jq43-mrhg

Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS)…

LOW 28

Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the component /common/library/Page.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00494 Published 2022-11-09 No fix listed CWE-79

TI-2022-12370 CVE-2022-30058 · GHSA-2x9p-5m3j-p43m

Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Download vulnerability via…

LOW 26

Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Download vulnerability via the neirong parameter at \backend\controllers\DbController.php.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01159 Published 2022-05-11 No fix listed CWE-22

TI-2022-12369 CVE-2022-30057 · GHSA-rg6c-grh4-v4hw

Shopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability.

LOW 25

Shopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00503 Published 2022-05-11 No fix listed CWE-79

Open these records in search →

Critical	1
High	2
Medium	4
Low	0
No CVSS	0