EcShop vulnerabilities
We track 5 vulnerabilities in EcShop products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on February 15, 2024.
Latest EcShop vulnerabilities
- 8.8 High severity
ECshop: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in ECshop 4.1.8. Affected by this issue is some unknown functionality of the file /admin/view_sendlist.php. The manipulation leads to sql injection. The attack may be launched remotely. The expl
- 8.8 High severity
ECshop: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goods_id leads to sql injection. The attack can be launched rem
- 8.8 High severity
ECshop: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New Product Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit
- 8.8 High severity
ECshop: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is some unknown functionality of the file admin/database.php of the component Backup Database Handler. The manipulation leads to unrestricted upl
- 9.8 Critical severity
EcShop: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in EcShop 4.1.5. It has been classified as critical. This affects an unknown part of the file /ecshop/admin/template.php of the component PHP File Handler. The manipulation leads to unrestricted upload. It is possible to initiate the