Work System E-commerce

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Work System E-commerce records in CISA KEV

No Work System E-commerce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Work System E-commerce 3 records MEDIUM

Records

3 records in Work System E-commerce · all components

TI-2007-01365 CVE-2007-1423 · GHSA-27rc-6r2c-mc56

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and…

MEDIUM 47

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the g_include parameter to include/include_top.php and cert…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04071 Published 2007-03-13 No fix listed

TI-2007-05567 CVE-2007-5801 · GHSA-v4wq-rpgc-mqx3

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and…

LOW 35

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01164 Published 2007-11-03 No fix listed

TI-2008-01766 CVE-2008-1839 · GHSA-f93v-7p8q-wgrc

Multgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system…

LOW 22

Multgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) day, (2) month, and (3) year parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-04-16 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0