CVE-2026-82922

ShopEx ECShop versions up to 2.5.1 are affected by a remote SQL injection in the function flow_update_cart within the file /flow.php?step=update_cart. The vulnerability is triggered by manipulating the rec_id argument, allowing an unauthenticated attacker to inject SQL over the network with no us...

CVE-2026-82921

ShopEx ECShop up to 2.5.1 is affected by an unrestricted file upload vulnerability in the check_img_type function within admin/pack.php . Manipulating the pack_img argument allows a remote attacker with no privileges and no user interaction to upload arbitrary files. The vulnerability is rated CV...

ECShop 4.1.0 - SQL Injection

ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information. id: CVE-2021-41460 info: name: ECShop 4.1.0 - SQL Injection author: SleepingBag945 severity: high description: | ECShop 4.1.0 has SQL injection vulnerability, which can be exploited ...

EUVD-2020-13425

Malware in sbrugna...

EUVD-2009-1617

Malware in sbrugna...

EUVD-2020-14969

Malware in sbrugna...

EUVD-2010-2062

Malware in sbrugna...

EUVD-2020-14971

Malware in sbrugna...

EUVD-2020-14970

Malware in sbrugna...

EUVD-2021-30586

Malicious code in bioql PyPI...

EUVD-2023-12797

Malicious code in bioql PyPI...

EUVD-2024-17278

Malicious code in bioql PyPI...

EUVD-2023-23464

Malicious code in bioql PyPI...

EUVD-2023-57616

Malicious code in bioql PyPI...

EUVD-2023-23465

Malicious code in bioql PyPI...

EUVD-2023-57617

Malicious code in bioql PyPI...

EUVD-2023-42858

Malicious code in bioql PyPI...

CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

CVE-2024-1530

A vulnerability, which was classified as critical, has been found in ECshop 4.1.8. Affected by this issue is some unknown functionality of the file /admin/viewsendlist.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public a...

CVE-2023-5294

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...