Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 302 respecto a la semana anterior

Críticas / altas1389▼ 21 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

62 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-17873	Modificada	Crítica (9.8)	2.7%	💥 Exploit	Vanguard Project Marketplace Digital Products PHP	27/12/2017	17/6/2026	Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.
CVE-2017-17625	Modificada	Crítica (9.8)	3.0%	💥 Exploit	ON Demand Marketplace Script Project ON Demand Marketplace Script	13/12/2017	17/6/2026	Professional Service Script 1.0 has SQL Injection via the service-list city parameter.
CVE-2017-17592	Modificada	Crítica (9.8)	3.0%	💥 Exploit	Website Auction Marketplace Project Website Auction Marketplace	13/12/2017	17/6/2026	Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
CVE-2017-17043	Modificada	Media (6.1)	5.1%	💥 Exploit	Zitec Emag Marketplace Connector	28/11/2017	17/6/2026	The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filtered correctly.
CVE-2010-2700	Modificada	Media (4.3)	1.2%	💥 Exploit	Edgephp Clickbank Affiliate Marketplace Script	12/7/2010	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVE-2010-2699	Modificada	Alta (7.5)	0.96%	💥 Exploit	Edgephp Clickbank Affiliate Marketplace Script	12/7/2010	16/6/2026	SQL injection vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote attackers to execute arbitrary SQL commands via the search parameter.
CVE-2010-0374	Modificada	Media (4.3)	1.4%	💥 Exploit	Codingfish COM Marketplace	21/1/2010	16/6/2026	Cross-site scripting (XSS) vulnerability in the Marketplace (com_marketplace) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the catid parameter in a show_category action to index.php.
CVE-2009-1496	Modificada	Media (5)	7.2%	💥 Exploit	Ijobid COM Cmimarketplace	1/5/2009	16/6/2026	Directory traversal vulnerability in the Cmi Marketplace (com_cmimarketplace) component 0.1 for Joomla! allows remote attackers to list arbitrary directories via a .. (dot dot) in the viewit parameter to index.php.
CVE-2008-5574	Modificada	Alta (7.5)	2.4%	💥 Exploit	Unscripts Webmaster Marketplace	15/12/2008	16/6/2026	SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL commands via the u parameter.
CVE-2008-4458	Modificada	Alta (7.5)	1.0%	💥 Exploit	E-php Scripts B2B Trading Marketplace Script	7/10/2008	16/6/2026	SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action.
CVE-2008-0689	Modificada	Alta (7.5)	0.94%	💥 Exploit	Joomla COM Marketplace	12/2/2008	16/6/2026	SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_category action.
CVE-2005-3937	Analizada	Alta (7.5)	1.3%	💥 Exploit	Softbizscripts B2B Trading Marketplace Script	1/12/2005	16/6/2026	SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.