Complete E-commerce Site vulnerabilities
1 known vulnerability in Complete E-commerce Site from Donbermoy. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
complete_ecommerce_site: Improper Control of Filename for Include/Require Statement in PHP Program
Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via filename parameter in admin/products_photo.php.