Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 4:31 a.m.4 views

CVE-2023-5294

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

8.8CVSS7.4AI score0.00051EPSS
Exploits1
OSV
OSV
added 2023/09/29 10:15 p.m.1 views

CVE-2023-5294

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

8.8CVSS5.7AI score
Exploits0References3
NVD
NVD
added 2023/09/29 10:15 p.m.8 views

CVE-2023-5294

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

8.8CVSS6.2AI score0.00051EPSS
Exploits1References3
Prion
Prion
added 2023/09/29 10:15 p.m.15 views

Sql injection

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

5.8CVSS8.9AI score0.00051EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/09/29 9:0 p.m.52 views

CVE-2023-5294

CVE-2023-5294 affects ECshop 4.1.1. The vulnerability is an SQL injection in the admin function, caused by manipulating the goods_id parameter in the file /admin/order.php. This can be exploited remotely and the exploit has been disclosed publicly. Several connected sources corroborate ECshop 4.1...

8.8CVSS6.9AI score0.00051EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/09/29 9:0 p.m.13 views

CVE-2023-5294 ECshop order.php sql injection

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

5.8CVSS9.2AI score0.00051EPSS
Exploits1References3
Rows per page
Query Builder