Marketplace Digital Products Php@1.4.0 Security Vulnerabilities and Issues — Marketplace Digital Products Php@1.4.0 CVE List

Lucene search

Vanguard ProjectMarketplace Digital Products Php1.4.0

2 matches found

CVE•added 2017/12/27 5:8 p.m.•41 views

CVE-2017-17873

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.

9.8CVSS9.8AI score0.01411EPSS

CVE•added 2017/12/27 5:8 p.m.•40 views

CVE-2017-17874

Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI.

8.8CVSS8.7AI score0.02389EPSS