Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-34177

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00214EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-34176

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00985EPSS
Exploits0References1
OSV
OSV
added 2023/05/20 10:15 a.m.0 views

CVE-2023-2712

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server.This issue affects Rental Module: before 23.05.15...

9.8CVSS7.3AI score
Exploits0References1
OSV
OSV
added 2023/05/20 10:15 a.m.1 views

CVE-2023-2713

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass.This issue affects Rental Module: before 23.05.15...

9.8CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2023/05/20 10:15 a.m.9 views

CVE-2023-2712

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server. This issue affects Rental Module: before 23.05.15...

9.8CVSS9.6AI score0.00985EPSS
Exploits0References2
NVD
NVD
added 2023/05/20 10:15 a.m.7 views

CVE-2023-2713

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass. This issue affects Rental Module: before 23.05.15...

9.8CVSS9.6AI score0.00214EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/05/20 10:15 a.m.0 views

CVE-2023-2712

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server. This issue affects Rental Module: before 23.05.15...

9.8CVSS7.3AI score0.00985EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/05/20 10:15 a.m.1 views

CVE-2023-2713

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass. This issue affects Rental Module: before 23.05.15...

9.8CVSS7.3AI score0.00214EPSS
Exploits0References3
Prion
Prion
added 2023/05/20 10:15 a.m.10 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass.This issue affects Rental Module: before 23.05.15...

7.5CVSS9.5AI score0.00214EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/05/20 9:52 a.m.38 views

CVE-2023-2713

CVE-2023-2713 describes an Authorization Bypass Through a User-Controlled Key in the Rental Module of Ideasoft’s E‑commerce Platform. The vulnerability allows Authentication Bypass in Rental Module versions prior to 23.05.15 due to misuse of a user-controlled key, enabling unauthorized access. Pu...

9.8CVSS7.3AI score0.00214EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/05/20 9:52 a.m.11 views

CVE-2023-2713 IDOR vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass. This issue affects Rental Module: before 23.05.15...

9.8CVSS9.7AI score0.00214EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/05/20 9:52 a.m.8 views

CVE-2023-2713 IDOR vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass. This issue affects Rental Module: before 23.05.15...

9.8CVSS7.3AI score0.00214EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/05/20 9:49 a.m.8 views

CVE-2023-2712 Malicious File Upload vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server. This issue affects Rental Module: before 23.05.15...

9.8CVSS7.3AI score0.00985EPSS
Exploits0References2
CVE
CVE
added 2023/05/20 9:49 a.m.66 views

CVE-2023-2712

The CVE-2023-2712 issue affects Ideasoft’s E-commerce Platform Rental Module (pre-23.05.15). It is caused by Unrestricted Upload of File with Dangerous Type, enabling Command Injection via uploaded files and potentially a Web Shell on the web server. Documented impact includes high confidentialit...

9.8CVSS7.3AI score0.00985EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/05/20 12:0 a.m.2 views

Ideasoft E-commerce Platform 安全漏洞

Ideasoft E-commerce Platform is an open source e-commerce platform from Ideasoft. A security vulnerability exists in Ideasoft E-commerce Platform versions prior to 23.05, which stems from a vulnerability in Rental Module that allows an attacker to bypass authorization via a controlled user key...

9.8CVSS8.3AI score0.00214EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/05/20 12:0 a.m.4 views

PT-2023-20965

Name of the Vulnerable Software and Affected Versions Rental Module versions prior to 23.05.15 Description The issue allows Command Injection and enables attackers to upload malicious files, including web shells, to a web server. This is due to an Unrestricted Upload of File with Dangerous Type...

9.8CVSS5.8AI score0.00985EPSS
Exploits0References8
CNNVD
CNNVD
added 2023/05/20 12:0 a.m.2 views

Ideasoft E-commerce Platform 代码问题漏洞

Ideasoft E-commerce Platform is an open source e-commerce platform from Ideasoft. Ideasoft E-commerce Platform before version 23.05 there is a code issue vulnerability, the vulnerability stems from the Rental Module has a dangerous type of file unrestricted upload vulnerability, allowing command...

9.8CVSS8.4AI score0.00985EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/05/20 12:0 a.m.3 views

PT-2023-20967

Name of the Vulnerable Software and Affected Versions Rental Module versions prior to 23.05.15 Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in the Rental Module, which allows for Authentication Abuse and Authentication Bypass. This...

9.8CVSS7.3AI score0.00214EPSS
Exploits0References8
Rows per page
Query Builder