Lucene search
K

6 matches found

Cvelist
Cvelist
added 2025/06/02 10:47 a.m.13 views

CVE-2025-47272 PhoenixCart Vulnerable to Account Deletion Without Password Confirmation

The CE Phoenix eCommerce platform, starting in version 1.0.9.7 and prior to version 1.1.0.3, allowed logged-in users to delete their accounts without requiring password re-authentication. An attacker with temporary access to an authenticated session e.g., on a shared/public machine could...

5.5CVSS0.0006EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/02 10:47 a.m.9 views

CVE-2025-47272 PhoenixCart Vulnerable to Account Deletion Without Password Confirmation

The CE Phoenix eCommerce platform, starting in version 1.0.9.7 and prior to version 1.1.0.3, allowed logged-in users to delete their accounts without requiring password re-authentication. An attacker with temporary access to an authenticated session e.g., on a shared/public machine could...

5.5CVSS6.8AI score0.0006EPSS
Exploits0References2
CVE
CVE
added 2025/06/02 10:47 a.m.41 views

CVE-2025-47272

CVE-2025-47272 affects CE Phoenix eCommerce (PhoenixCart) platforms versions 1.0.9.7 through 1.1.0.3, where logged-in users could delete their accounts without password re-authentication (session-based acceptance). Root cause: lack of re-auth for account deletion. Impact: potential permanent acco...

5.5CVSS5.4AI score0.0006EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/10 12:0 a.m.1 views

The vulnerability in the software for e-commerce solutions called CE Phoenix (CE PhoenixCart), which allows a hacker to execute arbitrary code.

The vulnerability in the software for electronic commerce, CE Phoenix CE PhoenixCart, involves incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6AI score0.07681EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:0 a.m.2 views

The vulnerability of the english.php file in the e-commerce software for CE Phoenix (CE PhoenixCart) allows a hacker to execute arbitrary code.

The vulnerability of the english.php file in the e-commerce software CE Phoenix CE PhoenixCart is related to deficiencies in eliminating special characters. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

4CVSS5.9AI score0.01931EPSS
Exploits0References3Affected Software1
Packet Storm
Packet Storm
added 2023/12/06 12:0 a.m.495 views

CE Phoenixcart 1.0.8.20 Shell Upload

Title: PhoenixCart-1.0.8.20-File-Upload-Bypass-override-htaccess-security-RCE Author: nu11secur1ty Date: 12/06/2023 Vendor: https://phoenixcart.org/index.php Software: https://github.com/CE-PhoenixCart/PhoenixCart/archive/master.zip Reference: https://portswigger.net/web-security/file-upload,...

7.4AI score
Exploits0
Rows per page
Query Builder