📦

complete_e-commerce_site

Vendor: donbermoy

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 2 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 0.97% Exploit Prob.
Latest CVE CVE-2024-30849 Apr 05

Security Vulnerability Index

Page 1 / 1
9.8 CVSS
CVE-2024-30849
RCE

Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via filename parameter in admin/products_photo.php.

EPSS: 1.12%
4.7 CVSS
CVE-2024-2754
RCE

A vulnerability classified as critical has been found in SourceCodester Complete E-Commerce Site 1.0. Affected is an unknown function of the file /admin/users_photo.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257544.

EPSS: 0.82%