shopizer kayıtları

shopizer üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %35,7
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

14 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2022-23063İstismar yok	Shopizer - Insufficient Session Expirationshopizer · shopizer · CWE-613	Yüksek8,8	—	%1,2	3 May 2022
32İzleyin	CVE-2025-51605İstismar yok	An issue was discovered in Shopizer 3.2.7.shopizer · shopizer · CWE-346 Kimlik doğrulamasız	Yüksek8,1	—	%0,2	22 Ağu 2025
28İzleyin	CVE-2014-4963Kavram kanıtı	Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.customerId parameter tshopizer · shopizer Kimlik doğrulamasız	Orta6,8	—	%3,7	15 Tem 2014
28İzleyin	CVE-2014-4964Kavram kanıtı	Multiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hijack the authenticationshopizer · shopizer · CWE-352 Kimlik doğrulamasız CSRF	Orta6,8	—	%2,3	15 Tem 2014
26İzleyin	CVE-2014-4962Kavram kanıtı	Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuantshopizer · shopizer · CWE-189 Kimlik doğrulamasız	Orta6,4	—	%4,7	15 Tem 2014
26İzleyin	CVE-2022-23061İstismar yok	Shopizer - IDOR delete superadminshopizer · shopizer · CWE-639 Erişim denetimi (IDOR)	Orta6,5	—	%1,1	1 May 2022
26İzleyin	CVE-2020-11007İstismar yok	Negative charge in shopping cart possible in Shopizershopizer · shopizer · CWE-20	Orta6,5	—	%0,9	16 Nis 2020
21İzleyin	CVE-2020-11006İstismar yok	Potential remote code execution in Shopizershopizer · shopizer · CWE-79 RCE XSS	Orta5,4	—	%0,6	8 May 2020
20İzleyin	CVE-2021-33562Kavram kanıtı	A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTMshopizer · shopizer · CWE-79 XSS	Orta4,8	—	%2,9	24 May 2021
20İzleyin	CVE-2021-33561Kavram kanıtı	A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML vshopizer · shopizer · CWE-79 XSS	Orta4,8	—	%2,9	24 May 2021
20İzleyin	CVE-2014-5385İstismar yok	com/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not restrict the number of authentication attempts, wshopizer · shopizer · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Orta5,0	—	%1,1	21 Ağu 2014
19İzleyin	CVE-2022-23059İstismar yok	Shopizer - Stored XSS in Manage Imagesshopizer · shopizer · CWE-79 XSS	Orta4,8	—	%0,6	29 Mar 2022
19İzleyin	CVE-2022-23060İstismar yok	Shopizer - Stored XSS in Manage Filesshopizer · shopizer · CWE-79 XSS	Orta4,8	—	%0,6	1 May 2022
18İzleyin	CVE-2014-4965Kavram kanıtı	Multiple cross-site scripting (XSS) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to inject arbitrary web script or Hshopizer · shopizer · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%3,2	15 Tem 2014

CVE-2022-23063
35İzleyin
Shopizer - Insufficient Session Expiration
YüksekCVSS 8,8İstismar yokEPSS %1
shopizer · shopizer3 May 2022
CVE-2025-51605
32İzleyin
An issue was discovered in Shopizer 3.2.7.
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
shopizer · shopizer22 Ağu 2025
CVE-2014-4963
28İzleyin
Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.customerId parameter t
OrtaCVSS 6,8Kavram kanıtıEPSS %4
- Kimlik doğrulamasız
shopizer · shopizer15 Tem 2014
CVE-2014-4964
28İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hijack the authentication
OrtaCVSS 6,8Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- CSRF
shopizer · shopizer15 Tem 2014
CVE-2014-4962
26İzleyin
Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuant
OrtaCVSS 6,4Kavram kanıtıEPSS %5
- Kimlik doğrulamasız
shopizer · shopizer15 Tem 2014
CVE-2022-23061
26İzleyin
Shopizer - IDOR delete superadmin
OrtaCVSS 6,5İstismar yokEPSS %1
- Erişim denetimi (IDOR)
shopizer · shopizer1 May 2022
CVE-2020-11007
26İzleyin
Negative charge in shopping cart possible in Shopizer
OrtaCVSS 6,5İstismar yokEPSS %1
shopizer · shopizer16 Nis 2020
CVE-2020-11006
21İzleyin
Potential remote code execution in Shopizer
OrtaCVSS 5,4İstismar yokEPSS %1
- RCE
- XSS
shopizer · shopizer8 May 2020
CVE-2021-33562
20İzleyin
A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTM
OrtaCVSS 4,8Kavram kanıtıEPSS %3
- XSS
shopizer · shopizer24 May 2021
CVE-2021-33561
20İzleyin
A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML v
OrtaCVSS 4,8Kavram kanıtıEPSS %3
- XSS
shopizer · shopizer24 May 2021
CVE-2014-5385
20İzleyin
com/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not restrict the number of authentication attempts, w
OrtaCVSS 5,0İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
shopizer · shopizer21 Ağu 2014
CVE-2022-23059
19İzleyin
Shopizer - Stored XSS in Manage Images
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
shopizer · shopizer29 Mar 2022
CVE-2022-23060
19İzleyin
Shopizer - Stored XSS in Manage Files
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
shopizer · shopizer1 May 2022
CVE-2014-4965
18İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to inject arbitrary web script or H
OrtaCVSS 4,3Kavram kanıtıEPSS %3
- Kimlik doğrulamasız
- XSS
shopizer · shopizer15 Tem 2014