work system e-commerce work system e-commerce vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and previous versions allow remote malicious users to execute arbitrary PHP code via a URL in the g_include parameter to include/include_top.php and certain other PHP scripts.

Work System E-commerce Work System E-commerce 3.0.4 Work System E-commerce Work System E-commerce 3.0.41 Work System E-commerce Work System E-commerce 3.0.5 Work System E-commerce Work System E-commerce 3.0.3

1 EDB exploit

7.5

CVSSv2

Unspecified vulnerability in WORK system e-commerce prior to 4.0.2 has unknown impact and attack vectors related to "Ajax pages."

Work System E-commerce Work System E-commerce

4.3

CVSSv2

Multgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote malicious users to inject arbitrary web script or HTML via the (1) day, (2) month, and (3) year parameters. NOTE: the provenance of this information is unknown; th...

Work System E-commerce Work System E-commerce 4.0.9

7.5

CVSSv2

Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions prior to 3.0.4, allow remote malicious users to execute arbitrary PHP code via a URL in the g_include parameter to (1) index.php, (2) module/forum/forum.p...

Laurent Van Den Reysen Work System E-commerce

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook