The E Commerce Website Project maintains a focused e-commerce platform with a narrow product footprint. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by E Commerce Website Project over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-27357CRITICAL Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customer_register.php. This vulnerability allows attackers to execute arbitrary code via | Apr 8, 2022 | 9.8 | 33 | NO | NO |
CVE-2021-25207CRITICAL Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file upload to prodViewUpdate.php. | Jul 23, 2021 | 9.8 | 31 | NO | NO |
CVE-2021-25205CRITICAL SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php . | Jul 22, 2021 | 9.8 | 30 | NO | NO |
CVE-2022-27346HIGH Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to execute arbitrary code | Apr 8, 2022 | 8.8 | 29 | NO | NO |
CVE-2022-27435HIGH An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image component. | Apr 4, 2022 | 8.8 | 29 | NO | NO |
CVE-2022-45990MEDIUM A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted pay | Dec 5, 2022 | 6.1 | 21 | NO | NO |
CVE-2021-25204MEDIUM Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedback_ | Jul 23, 2021 | 5.4 | 20 | NO | NO |
CVE-2022-27330MEDIUM A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_product of E-Commerce Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted | May 3, 2022 | 5.4 | 19 | NO | NO |
CVE-2022-27436MEDIUM A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted p | Apr 4, 2022 | 4.8 | 19 | NO | NO |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by E Commerce Website Project.
Media articles that mention a CVE ID that affects a product developed by E Commerce Website Project — matched by CVE ID, not by vendor name.