Lucene search
+L

90 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 4:04 p.m.•15 views

CVE-2020-25088

Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/blog/blogpublish.php...

6.1CVSS6.1AI score0.00679EPSS
SaveExploits0
NVD
NVD
•added 2024/07/05 2:15 p.m.•47 views

CVE-2024-6526

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

6.1CVSS0.00519EPSS
SaveExploits1References6
CVE
CVE
•added 2024/07/05 1:31 p.m.•77 views

CVE-2024-6526

CVE-2024-6526 affects CodeIgniter Ecommerce-CodeIgniter-Bootstrap. The vulnerability arises from manipulation of the arguments search_title, catName, sub, name, and categorie, which leads to cross-site scripting (XSS). It can be exploited remotely, and public exploits/ PoC have been disclosed. A ...

6.1CVSS4.5AI score0.00519EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2024/07/05 1:31 p.m.•52 views

CVE-2024-6526 CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

5.3CVSS0.00519EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/05 12:00 a.m.•2 views

CVE-2024-6526: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

6.1CVSS3.5AI score0.00519EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/29 6:15 p.m.•44 views

CVE-2024-31823

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component...

9.8CVSS7.5AI score0.01659EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/04/29 12:00 a.m.•16 views

Ecommerce-CodeIgniter-Bootstrap 安全漏洞

Ecommerce-CodeIgniter-Bootstrap is a responsive, multi-vendor, multi-language online store platform shopping cart solution. A security vulnerability exists in Ecommerce-CodeIgniter-Bootstrap that stems from an arbitrary code execution vulnerability in the manageQuantitiesAndProcurement method of...

8CVSS7.8AI score0.01075EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/29 12:00 a.m.•92 views

CVE-2024-31820

A security vulnerability exists in the Ecommerce-CodeIgniter-Bootstrap online store platform (commit v. d22b54e8915f167a135046ceb857caaf8479c4da ). The flaw allows a remote attacker to achieve arbitrary code execution via the getLangFolderForEdit method within the Languages.php component. While t...

9.8CVSS7.8AI score0.01919EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/29 12:00 a.m.•16 views

PT-2024-24228

Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap affected versions not specified Description The issue allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component. Recommendations At the moment, there i...

9.8CVSS7.4AI score0.01919EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2024/04/29 12:00 a.m.•22 views

Ecommerce-CodeIgniter-Bootstrap 安全漏洞

Ecommerce-CodeIgniter-Bootstrap is a responsive, multi-vendor, multi-language online store platform shopping cart solution. A security vulnerability exists in Ecommerce-CodeIgniter-Bootstrap, which stems from an arbitrary code execution vulnerability in the removeSecondaryImage method of the...

8.8CVSS7.8AI score0.01659EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•0 views

CVE-2024-31820: Improper Neutralization of Special Elements used in an SQL Command

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component...

9.8CVSS6.6AI score0.01919EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/04/29 12:00 a.m.•21 views

CVE-2024-31822

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component...

7.9AI score0.01919EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/04/29 12:00 a.m.•47 views

CVE-2024-31821

SQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the manageQuantitiesAndProcurement method of the Ordersmodel.php component...

8.6AI score0.01075EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/04/29 12:00 a.m.•18 views

Ecommerce-CodeIgniter-Bootstrap 安全漏洞

Ecommerce-CodeIgniter-Bootstrap is a responsive, multi-vendor, multi-language online store platform shopping cart solution. A security vulnerability exists in Ecommerce-CodeIgniter-Bootstrap, which stems from an arbitrary code execution vulnerability in the saveLanguageFiles method of the...

9.8CVSS7.8AI score0.01919EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•4 views

CVE-2024-31822: Improper Control of Generation of Code

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component...

9.8CVSS6.6AI score0.01919EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/29 12:00 a.m.•20 views

PT-2024-24231

Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap version d22b54e8915f167a135046ceb857caaf8479c4da Description The issue allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component. This enables the attack...

9.8CVSS8.1AI score0.01659EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•1 views

CVE-2024-31823: Improper Control of Generation of Code

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component...

9.8CVSS6.6AI score0.01659EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•1 views

CVE-2024-31821: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the manageQuantitiesAndProcurement method of the Ordersmodel.php component...

8CVSS6.7AI score0.01075EPSS
SaveExploits1References2
OSV
OSV
•added 2024/04/29 12:00 a.m.•29 views

CVE-2024-31820

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component...

9.8CVSS7.9AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2024/04/29 12:00 a.m.•57 views

CVE-2024-31820

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component...

7.8AI score0.01919EPSS
SaveExploits1References3
Rows per page
Query Builder