Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:31 a.m.•22 views

CVE-2023-5294

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

8.8CVSS7.4AI score0.00661EPSS
SaveExploits1
NVD
NVD
•added 2023/09/29 10:15 p.m.•37 views

CVE-2023-5294

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

8.8CVSS6.2AI score0.00661EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/09/29 10:15 p.m.•16 views

CVE-2023-5294

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

8.8CVSS5.7AI score0.00661EPSS
SaveExploits1References3
Prion
Prion
•added 2023/09/29 10:15 p.m.•30 views

Sql injection

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

5.8CVSS8.9AI score0.00661EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/09/29 9:00 p.m.•81 views

CVE-2023-5294

CVE-2023-5294 affects ECshop 4.1.1. The vulnerability is an SQL injection in the admin function, caused by manipulating the goods_id parameter in the file /admin/order.php. This can be exploited remotely and the exploit has been disclosed publicly. Several connected sources corroborate ECshop 4.1...

8.8CVSS5.8AI score0.00661EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/09/29 9:00 p.m.•42 views

CVE-2023-5294 ECshop order.php sql injection

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

5.8CVSS9.2AI score0.00661EPSS
SaveExploits1References3
Rows per page
Query Builder