56 matches found
Arbitrary file delete in ectouch/ectouch
ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...
GHSA-PH62-8768-R87V Arbitrary file delete in ectouch/ectouch
ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...
CVE-2022-25098
ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...
CVE-2022-25098
ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...
CVE-2022-25098
ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...
Arbitrary file deletion
ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...
ECTouch security vulnerabilities
ECTouch is a software application. An open source mobile mall system to create an enterprise-specific mobile mall. ECTouch A security vulnerability exists in ECTouch v2 due to insufficient filtration of file name parameters leading to arbitrary file deletion...
CVE-2022-25098
ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...
CVE-2022-25098
ECTouch v2 is affected by an arbitrary file deletion vulnerability caused by insufficient filtering of the filename parameter. The root cause cited is improper validation of file names, enabling deletion of files via this parameter. The connected documents in this set confirm the issue but do not...
CVE-2022-25098
ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...
PT-2022-17075
Name of the Vulnerable Software and Affected Versions ECTouch version 2 Description The issue is related to arbitrary file deletion due to insufficient filtering of the filename parameter. This allows for potential unauthorized access and modification of files. Recommendations For ECTouch version...
CVE-2022-25098: Undefined Security Weakness
ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...
CVE-2020-21806
SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...
CVE-2020-21806
SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...
Sql injection
SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...
ECTouch SQL Injection Vulnerability
ECTouch is a software application. An open source mobile mall system to create an enterprise exclusive mobile mall. A SQL injection vulnerability exists in ECTouch, which originates from the product index.php page failing to filter the input of special characters, an attacker can execute illegal...
CVE-2020-21806
The collected documents confirm a concrete vulnerability: CVE-2020-21806 affects ECTouch v2, with a SQL Injection on the shop page (index.php). The root cause cited in CNNVD-202107-2173 and related entries is failure to filter special characters in input, enabling an attacker to execute arbitrary...
CVE-2020-21806
SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...