Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3023▼ 71 respecto a la semana anterior

Críticas / altas1419▲ 54 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2010-4908	Modificada	Alta (7.5)	1.2%	—	Virtuenetz Virtue Shopping Mall	8/10/2011	16/6/2026	SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid parameter.
CVE-2009-2016	Modificada	Alta (7.5)	1.0%	—	Virtuenetz Virtue Shopping Mall	9/6/2009	16/6/2026	SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVE-2008-6232	Modificada	Alta (7.5)	2.9%	—	Preprojects PRE Shopping Mall	20/2/2009	16/6/2026	Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".
CVE-2008-6228	Modificada	Alta (7.5)	2.7%	—	Preproject PRE Multi-vendor Shopping Malls	20/2/2009	16/6/2026	Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".
CVE-2008-6227	Modificada	Alta (7.5)	0.97%	—	Preproject PRE Multi-vendor Shopping Malls	20/2/2009	16/6/2026	SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the (1) sid and (2) cid parameters.
CVE-2008-6151	Modificada	Alta (7.5)	0.97%	—	Sepcity Shopping Mall	16/2/2009	16/6/2026	SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVE-2008-2114	Modificada	Alta (7.5)	0.97%	—	Preprojects PRE Shopping Mall	8/5/2008	16/6/2026	SQL injection vulnerability in emall/search.php in Pre Shopping Mall 1.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
CVE-2007-2674	Modificada	Alta (7.5)	1.3%	—	PRE Projects PRE Shopping Mall	14/5/2007	16/6/2026	SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter.
CVE-2006-2669	Modificada	Media (4.3)	1.7%	—	Preprojects.com PRE Shopping Mall	30/5/2006	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter in search.php (the "search box"), (2) the prodid parameter in detail.php, and the (3) cid parameter in products.php.
CVE-2005-2259	Modificada	Alta (10)	4.2%	—	Usanet Creations Domain Name Auction Usanet Creations Makebid Auction Deluxe Usanet Creations Makebid Auction Standard Usanet Creations Makebid Reverse Auction+2	13/7/2005	16/6/2026	The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard Classified Ads Software, and (4) MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell metacharacters in the…