Arbitrary file delete in ectouch/ectouch

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

CVE-2022-25098

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

CVE-2022-25098

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

CVE-2022-25098

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

Arbitrary file deletion

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

ECTouch 安全漏洞

ECTouch is a software application. An open source mobile mall system to create an enterprise-specific mobile mall. ECTouch A security vulnerability exists in ECTouch v2 due to insufficient filtration of file name parameters leading to arbitrary file deletion...

CVE-2022-25098

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

CVE-2022-25098

ECTouch v2 is affected by an arbitrary file deletion vulnerability caused by insufficient filtering of the filename parameter. The root cause cited is improper validation of file names, enabling deletion of files via this parameter. The connected documents in this set confirm the issue but do not...

CVE-2022-25098

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

CVE-2022-25098: Undefined Security Weakness

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

PT-2022-17075

Name of the Vulnerable Software and Affected Versions ECTouch version 2 Description The issue is related to arbitrary file deletion due to insufficient filtering of the filename parameter. This allows for potential unauthorized access and modification of files. Recommendations For ECTouch version...

CVE-2020-21806

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

CVE-2020-21806

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

Sql injection

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

ECTouch SQL注入漏洞

ECTouch is a software application. An open source mobile mall system to create an enterprise exclusive mobile mall. A SQL injection vulnerability exists in ECTouch, which originates from the product index.php page failing to filter the input of special characters, an attacker can execute illegal...

CVE-2020-21806

The collected documents confirm a concrete vulnerability: CVE-2020-21806 affects ECTouch v2, with a SQL Injection on the shop page (index.php). The root cause cited in CNNVD-202107-2173 and related entries is failure to filter special characters in input, enabling an attacker to execute arbitrary...

CVE-2020-21806

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

CVE-2020-21806

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

CVE-2020-21806: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

PT-2021-10667

Name of the Vulnerable Software and Affected Versions: ECTouch version v2 Description: The issue is related to a SQL injection vulnerability in the shop page of index.php. This vulnerability can be exploited via the shop page in index.php. Recommendations: For ECTouch version v2, consider...