Vulnerabilities

TI-2022-22738 CVE-2022-45990 · GHSA-qmg8-hxwm-6pjc

A cross-site scripting (XSS) vulnerability in the component /signup_script.php of…

MEDIUM 60

A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00486 Published 2022-12-05 No fix listed CWE-79

TI-2022-10421 CVE-2022-27357 · GHSA-vhmm-vxgf-fv8v

Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via…

MEDIUM 48

Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customer_register.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03557 Published 2022-04-08 No fix listed CWE-434

TI-2022-10416 CVE-2022-27346 · GHSA-f68q-c3pj-x233

Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability…

MEDIUM 43

Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0271 Published 2022-04-08 No fix listed CWE-434

TI-2022-10465 CVE-2022-27436 · GHSA-m5hv-c47v-gqh5

A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at…

LOW 24

A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username text f…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00991 Published 2022-04-04 No fix listed CWE-79

TI-2022-10464 CVE-2022-27435 · GHSA-9xmc-7cw7-jxmj

An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website…

MEDIUM 41

An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01708 Published 2022-04-04 No fix listed CWE-434