Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Alegrocart Clear all filters
TI-2015-07607 CVE-2015-9227 · GHSA-2g6r-mhp9-27w3

PHP remote file inclusion vulnerability in the get_file function in…

Priority LOW 36

PHP remote file inclusion vulnerability in the get_file function in upload/admin2/controller/report_logs.php in AlegroCart 1.2.8 allows remote administrators to execute arbitrary PHP code via a URL in the file_path param…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02463 Published 2017-09-11 No fix listed CWE-94
TI-2015-07606 CVE-2015-9226 · GHSA-h2m6-hwwx-w627

Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to…

Priority LOW 36

Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute arbitrary SQL commands via the download parameter in the (1) check_download and possibly (2) check_filename function in up…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01981 Published 2017-09-11 No fix listed CWE-89
TI-2010-01555 CVE-2010-1611 · GHSA-74vg-8j35-j89h

Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 allows remote attackers…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 allows remote attackers to hijack the authentication of the administrator for requests that reset the administrator password via a POST to admin/ with an…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01017 Published 2010-04-29 No fix listed CWE-352