Ce Phoenix Security Vulnerabilities and Issues — Ce Phoenix CVE List

Lucene search

OscommerceCe Phoenix

2 matches found

CVE•added 2024/02/16 2:15 a.m.•67 views

CVE-2024-25415

A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload into the file english.php.

7.2CVSS8.2AI score0.06333EPSS

CVE•added 2024/03/12 5:15 a.m.•53 views

CVE-2024-26521

HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted payload to the english.php component.

4.8CVSS7.4AI score0.01931EPSS