Shopex Ecshop vulnerabilities

• shopex ecshop ShopEx ECShop flow.php flow_update_cart sql injection CVE-2026-82922 6.9 MediumAugust 31, 2026
• shopex ecshop ShopEx ECShop pack.php check_img_type unrestricted upload CVE-2026-82921 6.9 MediumAugust 31, 2026
• shopex ecshop Ecshop 3.6 is vulnerable to Cross Site Scripting (XSS) via ecshop/article_cat.php. CVE-2024-35362 5.4 MediumMay 22, 2024
• shopex ecshop SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via... CVE-2024-31025 7.5 HighApril 4, 2024
• shopex ecshop ECshop view_sendlist.php sql injection CVE-2024-1530 6.3 MediumFebruary 15, 2024
• shopex ecshop ECshop order.php sql injection CVE-2023-5294 4.7 MediumSeptember 29, 2023
• shopex ecshop ECshop leancloud.php sql injection CVE-2023-5293 4.7 MediumSeptember 29, 2023
• shopex ecshop ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel. CVE-2023-39112 6.5 MediumAugust 4, 2023
• shopex ecshop ECshop New Product unrestricted upload CVE-2023-1185 4.7 MediumMarch 6, 2023
• shopex ecshop ECshop Backup Database database.php unrestricted upload CVE-2023-1184 4.7 MediumMarch 6, 2023
• shopex ecshop EcShop PHP File template.php unrestricted upload CVE-2023-0783 4.7 MediumFebruary 11, 2023
• shopex ecshop ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain... CVE-2021-41460 7.5 HighJune 28, 2022
• shopex ecshop ecshop v2.7.3 is affected by a SQL injection vulnerability in shopex\ecshop\upload\api\client\api... CVE-2021-43679 9.8 CriticalDecember 2, 2021
• shopex ecshop Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the... CVE-2020-20640 6.1 MediumJune 28, 2021
• shopex ecshop SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliate_ck.php. CVE-2020-22206 9.8 CriticalJune 16, 2021
• shopex ecshop SQL Injection in ECShop 3.0 via the id parameter to admin/shophelp.php. CVE-2020-22205 9.8 CriticalJune 16, 2021
• shopex ecshop SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php. . CVE-2020-22204 9.8 CriticalJune 16, 2021
• shopex ecshop SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute... CVE-2010-2042 Public exploit 7.5 HighMay 25, 2010