online store system project vulnerabilities

Recent CVEs affecting online store system project products. 5 tracked.

online store system project has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-10-01. Highest priority: CVE-2019-8291 (score 54/100).

• CVE-2019-8292 MEDIUM 5.3 DOWNGRADE Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrativ
• CVE-2019-8291 HIGH 7.5 DOWNGRADE Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it
• CVE-2019-8290 MEDIUM 6.1 DOWNGRADE Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypa
• CVE-2019-8289 MEDIUM 5.4 DOWNGRADE Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variable
• CVE-2019-8288 MEDIUM 5.4 DOWNGRADE Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanit

FAQ

How do I fix online store system project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is online store system project being exploited right now?

None of the tracked online store system project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which online store system project CVE should I patch first?

CVE-2019-8291 currently ranks highest (54/100): Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it .

Products

• online store system

RSS feed for online store system project · ← Back to latest CVEs