Ecommerce-Website Project Ecommerce-Website
5 CVEs affecting Ecommerce-Website Project Ecommerce-Website. Latest disclosed: 2022-12-05. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-27357 | Critical | 9.8 | 2022-04-08 | Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customer_register.php. This vulnerability allows attackers to execut… |
CVE-2022-27346 | High | 8.8 | 2022-04-08 | Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to ex… |
CVE-2022-27435 | High | 8.8 | 2022-04-04 | An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image comp… |
CVE-2022-45990 | Medium | 6.1 | 2022-12-05 | A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or H… |
CVE-2022-27436 | Medium | 4.8 | 2022-04-04 | A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or… |