AbanteCart kayıtları
abantecart üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-50972İstismar yok | SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via the tmpl_id parameteabantecart · abantecart · CWE-89 | Kritik9,8 | — | %0,4 | 27 Ağu 2025 |
35İzleyin | CVE-2016-10755İstismar yok | AbanteCart 1.2.8 allows SQL Injection via the source_language parameter to admin/controller/pages/localisation/language.php and core/lib/lanabantecart · abantecart · CWE-89 | Yüksek8,8 | — | %1,3 | 24 May 2019 |
31İzleyin | CVE-2022-26521Kavram kanıtı | Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Cabantecart · abantecart · CWE-434 | Yüksek7,2 | — | %9,7 | 10 Mar 2022 |
30İzleyin | CVE-2025-50971İstismar yok | Directory traversal vulnerability in AbanteCart version 1.4.2 allows unauthenticated attackers to gain access to sensitive system files via abantecart · abantecart · CWE-22 | Yüksek7,5 | — | %0,9 | 26 Ağu 2025 |
24İzleyin | CVE-2018-20141İstismar yok | AbanteCart 1.2.12 has reflected cross-site scripting (XSS) via the sort parameter, as demonstrated by a /apparel--accessories?sort= substrinabantecart · abantecart · CWE-79 | Orta6,1 | — | %1,5 | 21 Mar 2019 |
24İzleyin | CVE-2021-42050İstismar yok | An issue was discovered in AbanteCart before 1.3.2.abantecart · abantecart · CWE-79 | Orta6,1 | — | %0,9 | 14 Ara 2021 |
24İzleyin | CVE-2024-50802İstismar yok | A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_abantecart · abantecart · CWE-89 | Orta6,0 | — | %0,3 | 31 Eki 2024 |
24İzleyin | CVE-2024-50801İstismar yok | A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_abantecart · abantecart · CWE-89 | Orta6,0 | — | %0,3 | 31 Eki 2024 |
21İzleyin | CVE-2021-42051İstismar yok | An issue was discovered in AbanteCart before 1.3.2.abantecart · abantecart · CWE-79 | Orta5,4 | — | %0,8 | 14 Ara 2021 |
20İzleyin | CVE-2025-40626İstismar yok | Reflected Cross-Site Scripting (XSS) in AbanteCartabantecart · abantecart · CWE-79 | Orta5,1 | — | %0,2 | 12 May 2025 |
20İzleyin | CVE-2025-40627İstismar yok | Reflected Cross-Site Scripting (XSS) in AbanteCartabantecart · abantecart · CWE-79 | Orta5,1 | — | %0,2 | 12 May 2025 |
- CVE-2025-5097239İzleyin
SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via the tmpl_id paramete
KritikCVSS 9,8İstismar yokEPSS %0abantecart · abantecart27 Ağu 2025
- CVE-2016-1075535İzleyin
AbanteCart 1.2.8 allows SQL Injection via the source_language parameter to admin/controller/pages/localisation/language.php and core/lib/lan
YüksekCVSS 8,8İstismar yokEPSS %1abantecart · abantecart24 May 2019
- CVE-2022-2652131İzleyin
Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the C
YüksekCVSS 7,2Kavram kanıtıEPSS %9abantecart · abantecart10 Mar 2022
- CVE-2025-5097130İzleyin
Directory traversal vulnerability in AbanteCart version 1.4.2 allows unauthenticated attackers to gain access to sensitive system files via
YüksekCVSS 7,5İstismar yokEPSS %0abantecart · abantecart26 Ağu 2025
- CVE-2018-2014124İzleyin
AbanteCart 1.2.12 has reflected cross-site scripting (XSS) via the sort parameter, as demonstrated by a /apparel--accessories?sort= substrin
OrtaCVSS 6,1İstismar yokEPSS %1abantecart · abantecart21 Mar 2019
- CVE-2021-4205024İzleyin
An issue was discovered in AbanteCart before 1.3.2.
OrtaCVSS 6,1İstismar yokEPSS %0abantecart · abantecart14 Ara 2021
- CVE-2024-5080224İzleyin
A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_
OrtaCVSS 6,0İstismar yokEPSS %0abantecart · abantecart31 Eki 2024
- CVE-2024-5080124İzleyin
A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_
OrtaCVSS 6,0İstismar yokEPSS %0abantecart · abantecart31 Eki 2024
- CVE-2021-4205121İzleyin
An issue was discovered in AbanteCart before 1.3.2.
OrtaCVSS 5,4İstismar yokEPSS %0abantecart · abantecart14 Ara 2021
- CVE-2025-4062620İzleyin
Reflected Cross-Site Scripting (XSS) in AbanteCart
OrtaCVSS 5,1İstismar yokEPSS %0abantecart · abantecart12 May 2025
- CVE-2025-4062720İzleyin
Reflected Cross-Site Scripting (XSS) in AbanteCart
OrtaCVSS 5,1İstismar yokEPSS %0abantecart · abantecart12 May 2025