Known Vulnerabilities for products from E-commerce Website Project

Listed below are 4 of the newest known vulnerabilities associated with the vendor "E-commerce Website Project".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2022-27330 json A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_product of E-Commerce Website v1.0 allows attackers... 5.4 - MEDIUM 2022-05-03 2022-05-11
CVE-2021-25207 json Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via... 9.8 - CRITICAL 2021-07-23 2021-09-13
CVE-2021-25205 json SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL state... 9.8 - CRITICAL 2021-07-22 2021-07-29
CVE-2021-25204 json Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitra... 5.4 - MEDIUM 2021-07-23 2021-09-13