Vulnerabilities

TI-2015-01991 CVE-2015-2244 · GHSA-f54h-2c95-465j

Multiple cross-site scripting (XSS) vulnerabilities in Webshop hun 1.062S allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Webshop hun 1.062S allow remote attackers to inject arbitrary web script or HTML via the (1) param, (2) center, (3) lap, (4) termid, or (5) nyelv_id parameter to ind…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01927 Published 2015-03-09 No fix listed CWE-79

TI-2015-01990 CVE-2015-2243 · GHSA-jf68-5jj9-ffph

Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have…

LOW 38

Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03063 Published 2015-03-09 No fix listed CWE-22

TI-2015-01989 CVE-2015-2242 · GHSA-w5g6-g2hq-m7mr

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to…

LOW 37

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the (1) termid or (2) nyelv_id parameter to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02155 Published 2015-03-09 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Webshop hun 1.062S allow remote…

Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have…

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to…