Lucene search
K

30 matches found

RedhatCVE
RedhatCVE
added 2025/12/04 12:30 p.m.2 views

CVE-2025-13296

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery.This issue affects T-Soft E-Commerce: through 28112025...

5.4CVSS6.9AI score0.00014EPSS
Exploits0References1
NVD
NVD
added 2025/12/01 12:15 p.m.1 views

CVE-2025-13296

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery. This issue affects T-Soft E-Commerce: through 28112025...

5.4CVSS0.00014EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/01 11:51 a.m.5 views

CVE-2025-13296 CSRF in Tekrom Technology's T-Soft E-Commerce

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery. This issue affects T-Soft E-Commerce: through 28112025...

5.4CVSS0.00014EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/01 11:51 a.m.4 views

CVE-2025-13296 CSRF in Tekrom Technology's T-Soft E-Commerce

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery. This issue affects T-Soft E-Commerce: through 28112025...

5.4CVSS5.8AI score0.00014EPSS
Exploits0References2
CVE
CVE
added 2025/12/01 11:51 a.m.11 views

CVE-2025-13296

CVE-2025-13296 is a Cross-Site Request Forgery (CSRF) vulnerability in Tekrom Technology Inc. T-Soft E-Commerce. Affected versions are T-Soft E-Commerce up to 28112025 (inclusive). The CVSS 3.1 vector from the provided metrics is AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N with a base score of 5.4 (Mediu...

5.4CVSS5.8AI score0.00014EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/12/01 11:51 a.m.3 views

CVE-2025-13296

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery. This issue affects T-Soft E-Commerce: through 28112025...

5.4CVSS5.8AI score0.00014EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/01 11:51 a.m.1 views

EUVD-2025-199984

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery.This issue affects T-Soft E-Commerce: through 28112025...

5.4CVSS6.4AI score0.00014EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/01 12:0 a.m.2 views

Tekrom T-Soft E-Commerce 跨站请求伪造漏洞

Tekrom T-Soft E-Commerce is an e-commerce software from Tekrom. A cross-site request forgery vulnerability exists in Tekrom T-Soft E-Commerce 28112025 and earlier versions, which can be exploited to trick a logged-in user into performing an unintended action...

5.4CVSS6.6AI score0.00014EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/01 12:0 a.m.3 views

PT-2025-48440

Name of the Vulnerable Software and Affected Versions Tekrom Technology Inc. T-Soft E-Commerce versions through 28112025 Description A Cross-Site Request Forgery CSRF issue exists in Tekrom Technology Inc. T-Soft E-Commerce. This allows an attacker to perform actions on behalf of an authenticated...

5.4CVSS5.6AI score0.00014EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-4363

Malicious code in bioql PyPI...

4.7CVSS6.6AI score0.00088EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/26 2:22 p.m.6 views

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS5.4AI score0.00088EPSS
Exploits0References1
NVD
NVD
added 2025/02/24 2:15 p.m.8 views

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS0.00088EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/24 1:43 p.m.5 views

CVE-2025-0545 XSS in Tekrom Technology's T-Soft E-Commerce

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS5.4AI score0.00088EPSS
Exploits0References2
CVE
CVE
added 2025/02/24 1:43 p.m.69 views

CVE-2025-0545

The CVE-2025-0545 vulnerability concerns Tekrom Technology’s T-Soft E-Commerce before v5, where improper neutralization of input during Web page generation enables Cross‑Site Scripting (XSS). The issue is tied to input handling in generating web pages, allowing injected scripts to run in the cont...

4.7CVSS5.4AI score0.00088EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/24 1:43 p.m.11 views

CVE-2025-0545 XSS in Tekrom Technology's T-Soft E-Commerce

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS0.00088EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/02/24 12:0 a.m.2 views

Tekrom T-Soft E-Commerce 跨站脚本漏洞

Tekrom T-Soft E-Commerce is an e-commerce software from Tekrom. A cross-site scripting vulnerability exists in Tekrom T-Soft E-Commerce versions prior to v5. The vulnerability stems from improper neutralization of inputs during Web page generation, resulting in cross-site scripting XSS...

4.7CVSS6.1AI score0.00088EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/14 9:20 a.m.6 views

CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...

7.2CVSS7.2AI score0.00061EPSS
Exploits2References1
NVD
NVD
added 2024/05/14 9:15 p.m.10 views

CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...

7.2CVSS6.8AI score0.00061EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2024/05/14 8:20 p.m.7 views

CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...

7.2AI score0.00061EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/05/14 8:20 p.m.17 views

CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...

7.1AI score0.00061EPSS
Exploits2References1
Rows per page
Query Builder