Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: InnoShop Clear all filters
TI-2025-32956 CVE-2025-52922 · GHSA-qj3r-7m99-68wq

Path traversal in InnoShop

Priority LOW 33

Innoshop through 0.4.1 allows directory traversal via FileManager API endpoints.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00465 Published 2025-06-23 No fix listed CWE-23
TI-2025-32955 CVE-2025-52921 · GHSA-xp47-r464-469h

In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager…

Priority MEDIUM 44

In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution on the server, by uploading a crafted file and then renaming it to have a .php ex…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00537 Published 2025-06-23 No fix listed CWE-420