Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/09/01 12:31 a.m.•23 views

EUVD-2026-68885

A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function checkimgtype of the file admin/pack.php. Executing a manipulation of the argument packimg can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to th...

7.5CVSS6.8AI score0.00472EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/31 9:15 p.m.•30 views

CVE-2026-82921

ShopEx ECShop up to 2.5.1 is affected by an unrestricted file upload vulnerability in the check_img_type function within admin/pack.php . Manipulating the pack_img argument allows a remote attacker with no privileges and no user interaction to upload arbitrary files. The vulnerability is rated CV...

7.5CVSS6.8AI score0.00472EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/31 9:15 p.m.•44 views

CVE-2026-82921 ShopEx ECShop pack.php check_img_type unrestricted upload

A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function checkimgtype of the file admin/pack.php. Executing a manipulation of the argument packimg can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to th...

7.5CVSS0.00472EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/31 12:00 a.m.•26 views

PT-2026-84044

Name of the Vulnerable Software and Affected Versions ShopEx ECShop versions prior to 2.5.2 Description A weakness in the check img type function within the admin/pack.php file allows for unrestricted file upload. A remote attacker can exploit this by manipulating the pack img argument...

7.5CVSS7.2AI score0.00472EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/31 12:00 a.m.•7 views

CVE-2026-82921: Unrestricted Upload of File with Dangerous Type

A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function checkimgtype of the file admin/pack.php. Executing a manipulation of the argument packimg can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to th...

7.5CVSS6.8AI score0.00472EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2013/09/23 12:00 a.m.•5 views

PT-2013-5869

Name of the Vulnerable Software and Affected Versions Platinum SEO plugin versions prior to 1.3.8 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the s parameter in the platinum seo pack.php file...

4.3CVSS0.01618EPSS
SaveExploits1References4
Rows per page
Query Builder