Vulnerabilities

TI-2007-03814 CVE-2007-3937 · GHSA-7g4f-rgpr-35g2

Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00952 Published 2007-07-21 No fix listed CWE-89

TI-2007-03813 CVE-2007-3936 · GHSA-4qw4-h59m-w45h

Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier…

LOW 33

Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier, and possibly 0.71, allows remote attackers to delete arbitrary files via unspecified filename references in the delfiles parameter.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.0232 Published 2007-07-21 No fix listed CWE-22

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier allow remote attackers…

Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier…