Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Ashopsoftware Clear all filters
TI-2019-15560 CVE-2019-25507 · GHSA-rg4v-3x6j-q8rr

Ashop Shopping Cart Software Lastest SQL Injection via index.php

Priority HIGH 77

Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'shop' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0027 Published 2026-03-04 No fix listed CWE-89
TI-2007-00052 CVE-2007-0056 · GHSA-wm6p-hjcc-5qw9

Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop…

Priority LOW 35

Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to (a) ashop/catalogue.php an…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02735 Published 2007-01-04 No fix listed