← Back

Ecommerce Website Project

ecommerce-website_project

5 CVEs • 1 product

Products (1)

Click to collapse
Toggle

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ecommerce Website Project
1Ecommerce Website
Jun 17, 2026
Dec 5, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter.
1Ecommerce Website Project
1Ecommerce Website
Jun 17, 2026
Apr 8, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customer_register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
1Ecommerce Website Project
1Ecommerce Website
Jun 17, 2026
Apr 8, 2022
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
1Ecommerce Website Project
1Ecommerce Website
Jun 17, 2026
Apr 4, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username text f...Show more
A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username text field.Show less
1Ecommerce Website Project
1Ecommerce Website
Jun 17, 2026
Apr 4, 2022
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image component.