📦

e-commerce_website

Vendor: e-commerce_website_project

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 1 Remote Access
Total CVEs 4 Total Indexed
Avg. EPSS 1.14% Exploit Prob.
Latest CVE CVE-2022-27330 May 03

Security Vulnerability Index

Page 1 / 1
5.4 CVSS
CVE-2022-27330

A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_product of E-Commerce Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Title text field.

EPSS: 0.55%
5.4 CVSS
CVE-2021-25204

Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedback_process.php.

EPSS: 0.66%
9.8 CVSS
CVE-2021-25207
RCE

Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file upload to prodViewUpdate.php.

EPSS: 1.87%
9.8 CVSS
CVE-2021-25205

SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php .

EPSS: 1.48%