Vanguard Project
Vanguard Project Marketplace Digital Products PHP: vulnerabilidades y CVE
Vanguard Project Marketplace Digital Products PHP tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2017-17937 | Media (6.1) | 0.63% | — | 28 dic 2017 | Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search. |
| CVE-2017-17936 | Alta (8.8) | 0.46% | — | 28 dic 2017 | Vanguard Marketplace Digital Products PHP has CSRF via /search. |
| CVE-2017-17874 | Alta (8.8) | 6.0% | — | 27 dic 2017 | Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI. |
| CVE-2017-17873 | Crítica (9.8) | 2.7% | — | 27 dic 2017 | Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI. |