complete_ecommerce_site vulnerabilities

2 known vulnerabilities in complete_ecommerce_site from SourceCodester. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  complete_ecommerce_site: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2024-30849Apr 5, 2024SourceCodesterEPSS 1.12%

  Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via filename parameter in admin/products_photo.php.

• 8.8 High severity

  Complete E-Commerce Site: Unrestricted Upload of File with Dangerous Type

  CVE-2024-2754Mar 21, 2024SourceCodester

  A vulnerability classified as critical has been found in SourceCodester Complete E-Commerce Site 1.0. Affected is an unknown function of the file /admin/users_photo.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to lau