4.7
Medium
CVE-2023-5293 A vulnerability, which was classified as critical, was found in ECshop 4.1.5
Description
A vulnerability, which was classified as critical, was found in ECshop 4.1.5. Affected is an unknown function of the file /admin/leancloud.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240924.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcShop | 4.1.5 | No fix stated |
Other CVEs of EcShop
The 6 CVEs of EcShop →
CVE-2024-1530
A vulnerability, which was classified as critical, has been found in ECshop 4.1.8
6.3
Medium
CVE-2023-5294
A vulnerability has been found in ECshop 4.1.1 and classified as critical
4.7
Medium
CVE-2023-1185
A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8
4.7
Medium
CVE-2023-1184
A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8
4.7
Medium