Lucene search
K

15 matches found

OSV
OSV
added 2026/02/20 5:25 p.m.4 views

CVE-2025-15583

A weakness has been identified in detronetdip E-commerce 1.0.0. This affects the function getsafevalue of the file utility/function.php. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be...

5.4CVSS4.3AI score
Exploits0References6
CVE
CVE
added 2026/02/20 4:32 p.m.10 views

CVE-2025-15583

CVE-2025-15583 affects detronetdip E-commerce 1.0.0, specifically the get_safe_value function in util/function.php. The vulnerability induces cross-site scripting and can be triggered remotely; public exploit appears to be available. The description provides no details on a fix or mitigations, an...

5.4CVSS3.9AI score0.00239EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2026/02/20 4:32 p.m.27 views

CVE-2025-15582 detronetdip E-commerce Product Management Update authorization

A security flaw has been discovered in detronetdip E-commerce 1.0.0. The impacted element is the function Delete/Update of the component Product Management Module. Performing a manipulation of the argument ID results in authorization bypass. Remote exploitation of the attack is possible. The...

5.5CVSS0.00348EPSS
Exploits1References6
CVE
CVE
added 2026/02/20 4:32 p.m.10 views

CVE-2025-15582

The CVE-2025-15582 issue affects detronetdip E-commerce 1.0.0, specifically the Delete/Update function in the Product Management Module. A manipulation of the ID argument yields an authorization bypass, enabling remote exploitation. Public exploit code is referenced, and vendors have not provided...

8.1CVSS5.3AI score0.00348EPSS
Exploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.4 views

PT-2026-21249

A weakness has been identified in detronetdip E-commerce 1.0.0. This affects the function get safe value of the file utility/function.php. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be...

5.1CVSS3.9AI score0.00239EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2026/02/09 7:23 p.m.5 views

CVE-2026-2165

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

9.8CVSS5.2AI score0.0057EPSS
Exploits1References1
OSV
OSV
added 2026/02/08 5:15 p.m.5 views

CVE-2026-2165

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

9.8CVSS5.4AI score
Exploits0References6
NVD
NVD
added 2026/02/08 5:15 p.m.5 views

CVE-2026-2165

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

9.8CVSS0.0057EPSS
Exploits1References6
NVD
NVD
added 2026/02/08 5:15 p.m.8 views

CVE-2026-2164

A security flaw has been discovered in detronetdip E-commerce 1.0.0. This issue affects some unknown processing of the file /seller/assets/backend/profile/addadhar.php. Performing a manipulation of the argument File results in unrestricted upload. Remote exploitation of the attack is possible. Th...

9.8CVSS0.00451EPSS
Exploits1References6
CVE
CVE
added 2026/02/08 4:32 p.m.9 views

CVE-2026-2165

CVE-2026-2165 affects detronetdip E-commerce 1.0.0. The vulnerability lies in an unknown function of /Admin/assets/backend/seller/add_seller.php where manipulating the email argument can cause missing authentication, enabling a remote exploit. Public exploit exists; the issue was reported early v...

9.8CVSS7.1AI score0.0057EPSS
Exploits1References6Affected Software1
EUVD
EUVD
added 2026/02/08 4:32 p.m.5 views

EUVD-2026-5784

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

7.5CVSS5.2AI score0.0057EPSS
Exploits1References6
Cvelist
Cvelist
added 2026/02/08 4:32 p.m.28 views

CVE-2026-2164 detronetdip E-commerce addadhar.php unrestricted upload

A security flaw has been discovered in detronetdip E-commerce 1.0.0. This issue affects some unknown processing of the file /seller/assets/backend/profile/addadhar.php. Performing a manipulation of the argument File results in unrestricted upload. Remote exploitation of the attack is possible. Th...

7.5CVSS0.00451EPSS
Exploits1References6
CVE
CVE
added 2026/02/08 4:32 p.m.13 views

CVE-2026-2164

Detronetdip E-commerce 1.0.0 is affected by an unrestricted upload vulnerability in the file path /seller/assets/backend/profile/addadhar.php. The issue arises from manipulating the File argument, enabling remote code upload and exploitation. Public exploitation has been released, and maintainers...

9.8CVSS7.1AI score0.00451EPSS
Exploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/08 4:32 p.m.4 views

CVE-2026-2164 detronetdip E-commerce addadhar.php unrestricted upload

A security flaw has been discovered in detronetdip E-commerce 1.0.0. This issue affects some unknown processing of the file /seller/assets/backend/profile/addadhar.php. Performing a manipulation of the argument File results in unrestricted upload. Remote exploitation of the attack is possible. Th...

7.5CVSS5.2AI score0.00451EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/02/08 12:0 a.m.5 views

PT-2026-6996

Name of the Vulnerable Software and Affected Versions detronetdip E-commerce version 1.0.0 Description A weakness exists in detronetdip E-commerce 1.0.0 related to account creation. A manipulation of the email argument within an unknown function of the file /Admin/assets/backend/seller/add...

7.5CVSS5.2AI score0.0057EPSS
Exploits1References8
Rows per page
Query Builder