← Back

Ecshop

ecshop

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Epshop
epshop
1 CVE
Ecshop
ecshop
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-1622
1Ecshop
1Ecshop
Apr 23, 2026
May 12, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the order_sn parameter in an order_query action.
CVE-2008-3412
1Ecshop
1Epshop
Apr 23, 2026
Jul 31, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a (1) pro_show or (2) disppro action to the default URI.