Vulnerabilities

TI-2023-20687 CVE-2023-39560 · GHSA-cwpx-h68q-f42j

ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id']…

MEDIUM 56

ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id'] parameter at \default\helpers\insert.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04684 Published 2023-08-28 No fix listed CWE-89

TI-2022-08840 CVE-2022-25098 · GHSA-ph62-8768-r87v

MEDIUM 41

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00987 Published 2022-02-23 No fix listed

TI-2020-14167 CVE-2020-21806 · GHSA-p634-mhpc-5857

MEDIUM 44

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php..

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01162 Published 2021-07-27 No fix listed CWE-89

TI-2020-13323 CVE-2020-18144 · GHSA-v3fc-3m3g-pfx8

MEDIUM 44

SQL Injection Vulnerability in ECTouch v2 via the integral_min parameter in index.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01138 Published 2021-07-14 No fix listed CWE-89