Lucene search
K

25 matches found

RedhatCVE
RedhatCVE
added 2025/12/04 12:30 p.m.9 views

CVE-2025-13296

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery.This issue affects T-Soft E-Commerce: through 28112025...

5.4CVSS6.9AI score0.00095EPSS
Exploits0References1
NVD
NVD
added 2025/12/01 12:15 p.m.3 views

CVE-2025-13296

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery. This issue affects T-Soft E-Commerce: through 28112025...

5.4CVSS0.00095EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/01 11:51 a.m.3 views

EUVD-2025-199984

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery.This issue affects T-Soft E-Commerce: through 28112025...

5.4CVSS6.4AI score0.00095EPSS
Exploits0References2
CVE
CVE
added 2025/12/01 11:51 a.m.14 views

CVE-2025-13296

CVE-2025-13296 is a Cross-Site Request Forgery (CSRF) vulnerability in Tekrom Technology Inc. T-Soft E-Commerce. Affected versions are T-Soft E-Commerce up to 28112025 (inclusive). The CVSS 3.1 vector from the provided metrics is AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N with a base score of 5.4 (Mediu...

5.4CVSS5.8AI score0.00095EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/12/01 11:51 a.m.4 views

CVE-2025-13296

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery. This issue affects T-Soft E-Commerce: through 28112025...

5.4CVSS5.8AI score0.00095EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/01 11:51 a.m.8 views

CVE-2025-13296 CSRF in Tekrom Technology's T-Soft E-Commerce

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery. This issue affects T-Soft E-Commerce: through 28112025...

5.4CVSS0.00095EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/01 12:0 a.m.4 views

PT-2025-48440

Name of the Vulnerable Software and Affected Versions Tekrom Technology Inc. T-Soft E-Commerce versions through 28112025 Description A Cross-Site Request Forgery CSRF issue exists in Tekrom Technology Inc. T-Soft E-Commerce. This allows an attacker to perform actions on behalf of an authenticated...

5.4CVSS5.6AI score0.00095EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-4363

Malicious code in bioql PyPI...

4.7CVSS6.6AI score0.0026EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/26 2:22 p.m.7 views

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS5.4AI score0.0026EPSS
Exploits0References1
NVD
NVD
added 2025/02/24 2:15 p.m.10 views

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS0.0026EPSS
Exploits0References2
CVE
CVE
added 2025/02/24 1:43 p.m.71 views

CVE-2025-0545

The CVE-2025-0545 vulnerability concerns Tekrom Technology’s T-Soft E-Commerce before v5, where improper neutralization of input during Web page generation enables Cross‑Site Scripting (XSS). The issue is tied to input handling in generating web pages, allowing injected scripts to run in the cont...

4.7CVSS5.4AI score0.0026EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/24 1:43 p.m.6 views

CVE-2025-0545 XSS in Tekrom Technology's T-Soft E-Commerce

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS5.4AI score0.0026EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/24 1:43 p.m.15 views

CVE-2025-0545 XSS in Tekrom Technology's T-Soft E-Commerce

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS0.0026EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/14 9:20 a.m.9 views

CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...

7.2CVSS7.2AI score0.00613EPSS
Exploits2References1
NVD
NVD
added 2024/05/14 9:15 p.m.13 views

CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...

7.2CVSS6.8AI score0.00613EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2024/05/14 8:20 p.m.9 views

CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...

7.2AI score0.00613EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/05/14 8:20 p.m.23 views

CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...

7.1AI score0.00613EPSS
Exploits2References1
CVE
CVE
added 2024/05/14 8:20 p.m.86 views

CVE-2022-28132

CVE-2022-28132 concerns the T-Soft E-Commerce 4 web application, where an authenticated admin/privileged user can trigger a SQL injection via crafted requests. The vulnerability allows attackers to access and manipulate the database, bypass authentication, view sensitive data, and potentially exf...

7.2CVSS7AI score0.00613EPSS
Exploits2References1
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.4 views

T-Soft E-Commerce 安全漏洞

T-Soft E-Commerce is an e-commerce software from T-Soft. A security vulnerability exists in T-Soft E-Commerce 4. An attacker exploited the vulnerability to access and manipulate the database via specially crafted requests...

7.2CVSS6.6AI score0.00613EPSS
Exploits2References3
0day.today
0day.today
added 2022/05/17 12:0 a.m.177 views

T-Soft E-Commerce 4 - (UrunAdi) Stored Cross-Site Scripting Vulnerability

Exploit Title: T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting XSS Exploit Author: Alperen Ergel alpernae IG/TW Web Site: https://alperenae.gitbook.io/ Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux Category: WebApp Google Dork: N/A CVE :N/A Descriptio...

7.4AI score
Exploits0
Rows per page
Query Builder