Ectouch

ectouch

Vendor: Ectouch • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-39560 1Ectouch 1Ectouch Jun 17, 2026 Aug 28, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id'] parameter at \default\helpers\insert.php.
CVE-2022-25098 1Ectouch 1Ectouch Jun 17, 2026 Feb 24, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.
CVE-2020-21806 1Ectouch 1Ectouch Jun 17, 2026 Jul 30, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php..
CVE-2020-18144 1Ectouch 1Ectouch Jun 17, 2026 Jul 14, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection Vulnerability in ECTouch v2 via the integral_min parameter in index.php.