PatchTheCVEonline store system vulnerabilities and fixes
Recent CVEs affecting online store system, with upgrade or downgrade steps. 5 tracked.
Also searched as: onlinestoresystem.
online store system has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-10-01. Highest priority: CVE-2019-8291 (score 54/100).
- CVE-2019-8292 MEDIUM 5.3 DOWNGRADE Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrativ
- CVE-2019-8291 HIGH 7.5 DOWNGRADE Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it
- CVE-2019-8290 MEDIUM 6.1 DOWNGRADE Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypa
- CVE-2019-8289 MEDIUM 5.4 DOWNGRADE Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variable
- CVE-2019-8288 MEDIUM 5.4 DOWNGRADE Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanit
FAQ
How do I fix online store system vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is online store system being exploited right now?
None of the tracked online store system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which online store system CVE should I patch first?
CVE-2019-8291 currently ranks highest (54/100): Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it .