Phpshop Security Vulnerabilities and Issues — Phpshop CVE List

Lucene search

PhpshopPhpshop

6 matches found

CVE•added 2020/02/05 9:15 p.m.•46 views

CVE-2011-1069

PHPShop through 0.8.1 has XSS.

6.1CVSS6.3AI score0.0024EPSS

CVE•added 2010/01/05 7:0 p.m.•44 views

CVE-2009-4570

Cross-site scripting (XSS) vulnerability in PhpShop 0.8.1 allows remote attackers to inject arbitrary web script or HTML via the order_id parameter in an order/order_print action to the default URI.

4.3CVSS5.9AI score0.0034EPSS

CVE•added 2010/01/05 7:0 p.m.•43 views

CVE-2009-4571

Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL commands via the (1) module_id parameter in an admin/function_list action, the (2) vendor_id parameter in a vendor/vendor_form action, the (3) module_id parameter in an admin/module_...

7.5CVSS8.6AI score0.00527EPSS

CVE•added 2011/09/14 2:56 a.m.•37 views

CVE-2010-4836

Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to inject arbitrary web script or HTML via the name_new parameter.

4.3CVSS5.9AI score0.00906EPSS

CVE•added 2008/02/12 1:0 a.m.•32 views

CVE-2008-0681

SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the product_id parameter, as demonstrated by a shop/flypage action.

6.8CVSS8.2AI score0.00326EPSS

CVE•added 2010/01/05 7:0 p.m.•32 views

CVE-2009-4572

Cross-site request forgery (CSRF) vulnerability in PhpShop 0.8.1 allows remote attackers to hijack the authentication of arbitrary users for requests that invoke the cartAdd function in a shop/cart action to the default URI.

6.8CVSS7.4AI score0.00149EPSS