Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
SmartstoreSmartstorenet

4 matches found

CVE
CVE•added 2021/05/19 6:57 p.m.•74 views

CVE-2020-36365

Smartstore (aka SmartStoreNET) before 4.1.0 contains an open redirect vulnerability exploitable via CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskController.Edit. An attacker can redirect a logged-in user to a malicious site, potentially enabling phishing or...

6.1CVSS6.2AI score0.02575EPSS
CVE
CVE•added 2021/02/19 11:0 p.m.•71 views

CVE-2020-27997

CVE-2020-27997 affects SmartStoreNET before 4.1.0. The issue is a CSRF protection gap that may allow elevation of privileges, for example by calling /admin/customer/create to create an admin account. The available documents confirm the vulnerability's existence and context but do not provide conc...

8.8CVSS8.8AI score0.00823EPSS
Web
CVE
CVE•added 2021/05/19 6:57 p.m.•55 views

CVE-2020-36364

CVE-2020-36364 affects Smartstore/SmartStoreNET prior to 4.1.0. The issue arises in Administration/Controllers/ImportController.cs (ImportController.Create) where a TempFileName field enables path traversal during copy and delete actions. The publicly documented impact is classic path traversal, ...

9.1CVSS9.1AI score0.01802EPSS
CVE
CVE•added 2020/10/29 5:7 p.m.•45 views

CVE-2020-27996

"CVE-2020-27996 affects SmartStoreNET

8.8CVSS8.6AI score0.02148EPSS