CVE-2025-15583

all versions

A weakness has been identified in detronetdip E-commerce 1.0.0. This affects the function get_safe_value of the file utility/funct

3.5LOW

CVE-2025-15582

all versions

A security flaw has been discovered in detronetdip E-commerce 1.0.0. The impacted element is the function Delete/Update of the com

5.4MEDIUM

CVE-2026-2165

all versions

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/

7.3HIGH

CVE-2026-2164

all versions

A security flaw has been discovered in detronetdip E-commerce 1.0.0. This issue affects some unknown processing of the file /selle

7.3HIGH

CVE-2025-63883

all versions

A DOM-based cross-site scripting vulnerability exists in electic-shop v1.0 (Bhabishya-123/E-commerce). The site's client-side Java

5.4MEDIUM

CVE-2023-3857

all versions

A vulnerability, which was classified as problematic, was found in phpscriptpoint Ecommerce 1.15. This affects an unknown part of

3.5LOW

CVE-2023-3856

all versions

A vulnerability, which was classified as problematic, has been found in phpscriptpoint Ecommerce 1.15. Affected by this issue is s

3.5LOW

CVE-2018-20849

all versions

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.

6.1MEDIUM

CVE-2019-0308

all versions

An authenticated attacker in SAP E-Commerce (Business-to-Consumer application), versions 7.3, 7.31, 7.32, 7.33, 7.54, can change t

6.8MEDIUM

CVE-2019-0298

all versions

SAP E-Commerce (Business-to-Consumer) application does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scr

6.1MEDIUM

CVE-2014-10017

all versions

Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to execute arb

CVE-2014-10016

all versions

Multiple cross-site scripting (XSS) vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers t

CVE-2007-0190

all versions

PHP remote file inclusion vulnerability in edit_address.php in edit-x ecommerce allows remote attackers to execute arbitrary PHP c

CVE-2001-0614

<= 1.2.1

Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a s