Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wghh-rw2v-wf6q

Опубликовано: 30 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goods_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240925 was assigned to this vulnerability.

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goods_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240925 was assigned to this vulnerability.

EPSS

Процентиль: 16%
0.00051
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 4.7
nvd
больше 2 лет назад

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goods_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240925 was assigned to this vulnerability.

EPSS

Процентиль: 16%
0.00051
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-89