ShopEx kayıtları
shopex üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')10
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-287 Improper Authentication1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-43679İstismar yok | ecshop v2.7.3 is affected by a SQL injection vulnerability in shopex\ecshop\upload\api\client\api.php.shopex · ecshop · CWE-89 | Kritik9,8 | — | %1,6 | 2 Ara 2021 |
39İzleyin | CVE-2020-22204İstismar yok | SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php.shopex · ecshop · CWE-89 | Kritik9,8 | — | %1,4 | 16 Haz 2021 |
39İzleyin | CVE-2020-22205İstismar yok | SQL Injection in ECShop 3.0 via the id parameter to admin/shophelp.php.shopex · ecshop · CWE-89 | Kritik9,8 | — | %1,4 | 16 Haz 2021 |
39İzleyin | CVE-2020-22206İstismar yok | SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliate_ck.php.shopex · ecshop · CWE-89 | Kritik9,8 | — | %1,4 | 16 Haz 2021 |
39İzleyin | CVE-2023-0783İstismar yok | EcShop PHP File template.php unrestricted uploadshopex · ecshop · CWE-434 | Kritik9,8 | — | %0,8 | 11 Şub 2023 |
35İzleyin | CVE-2023-1185İstismar yok | ECshop New Product unrestricted uploadshopex · ecshop · CWE-434 | Yüksek8,8 | — | %0,7 | 6 Mar 2023 |
35İzleyin | CVE-2023-1184İstismar yok | ECshop Backup Database database.php unrestricted uploadshopex · ecshop · CWE-434 | Yüksek8,8 | — | %0,7 | 6 Mar 2023 |
35İzleyin | CVE-2023-5294İstismar yok | ECshop order.php sql injectionshopex · ecshop · CWE-89 | Yüksek8,8 | — | %0,6 | 29 Eyl 2023 |
35İzleyin | CVE-2024-1530İstismar yok | ECshop view_sendlist.php sql injectionshopex · ecshop · CWE-89 | Yüksek8,8 | — | %0,5 | 15 Şub 2024 |
32İzleyin | CVE-2021-41460Kavram kanıtı | ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information.shopex · ecshop · CWE-89 | Yüksek7,5 | — | %6,7 | 28 Haz 2022 |
30İzleyin | CVE-2010-2042Kavram kanıtı | SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via the encode parametershopex · ecshop · CWE-89 | Yüksek7,5 | — | %0,9 | 25 May 2010 |
30İzleyin | CVE-2024-31025İstismar yok | SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component.CWE-89 | Yüksek7,5 | — | %0,5 | 4 Nis 2024 |
26İzleyin | CVE-2023-39112İstismar yok | ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel.shopex · ecshop · CWE-287 | Orta6,5 | — | %0,6 | 4 Ağu 2023 |
26İzleyin | CVE-2023-5293İstismar yok | ECshop leancloud.php sql injectionshopex · ecshop · CWE-89 | Orta6,5 | — | %0,5 | 29 Eyl 2023 |
24İzleyin | CVE-2020-20640İstismar yok | Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity enshopex · ecshop · CWE-79 | Orta6,1 | — | %0,8 | 28 Haz 2021 |
21İzleyin | CVE-2024-35362İstismar yok | Ecshop 3.6 is vulnerable to Cross Site Scripting (XSS) via ecshop/article_cat.php.shopex · ecshop · CWE-79 | Orta5,4 | — | %0,2 | 22 May 2024 |
- CVE-2021-4367939İzleyin
ecshop v2.7.3 is affected by a SQL injection vulnerability in shopex\ecshop\upload\api\client\api.php.
KritikCVSS 9,8İstismar yokEPSS %1shopex · ecshop2 Ara 2021
- CVE-2020-2220439İzleyin
SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php.
KritikCVSS 9,8İstismar yokEPSS %1shopex · ecshop16 Haz 2021
- CVE-2020-2220539İzleyin
SQL Injection in ECShop 3.0 via the id parameter to admin/shophelp.php.
KritikCVSS 9,8İstismar yokEPSS %1shopex · ecshop16 Haz 2021
- CVE-2020-2220639İzleyin
SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliate_ck.php.
KritikCVSS 9,8İstismar yokEPSS %1shopex · ecshop16 Haz 2021
- CVE-2023-078339İzleyin
EcShop PHP File template.php unrestricted upload
KritikCVSS 9,8İstismar yokEPSS %0shopex · ecshop11 Şub 2023
- CVE-2023-118535İzleyin
ECshop New Product unrestricted upload
YüksekCVSS 8,8İstismar yokEPSS %0shopex · ecshop6 Mar 2023
- CVE-2023-118435İzleyin
ECshop Backup Database database.php unrestricted upload
YüksekCVSS 8,8İstismar yokEPSS %0shopex · ecshop6 Mar 2023
- CVE-2023-529435İzleyin
ECshop order.php sql injection
YüksekCVSS 8,8İstismar yokEPSS %0shopex · ecshop29 Eyl 2023
- CVE-2024-153035İzleyin
ECshop view_sendlist.php sql injection
YüksekCVSS 8,8İstismar yokEPSS %0shopex · ecshop15 Şub 2024
- CVE-2021-4146032İzleyin
ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information.
YüksekCVSS 7,5Kavram kanıtıEPSS %6shopex · ecshop28 Haz 2022
- CVE-2010-204230İzleyin
SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via the encode parameter
YüksekCVSS 7,5Kavram kanıtıEPSS %0shopex · ecshop25 May 2010
- CVE-2024-3102530İzleyin
SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component.
YüksekCVSS 7,5İstismar yokEPSS %04 Nis 2024
- CVE-2023-3911226İzleyin
ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel.
OrtaCVSS 6,5İstismar yokEPSS %0shopex · ecshop4 Ağu 2023
- CVE-2023-529326İzleyin
ECshop leancloud.php sql injection
OrtaCVSS 6,5İstismar yokEPSS %0shopex · ecshop29 Eyl 2023
- CVE-2020-2064024İzleyin
Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity en
OrtaCVSS 6,1İstismar yokEPSS %0shopex · ecshop28 Haz 2021
- CVE-2024-3536221İzleyin
Ecshop 3.6 is vulnerable to Cross Site Scripting (XSS) via ecshop/article_cat.php.
OrtaCVSS 5,4İstismar yokEPSS %0shopex · ecshop22 May 2024