Comdev Ecommerce (Comdev) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2007-06-06. Vendor: Comdev.

CVEs of Comdev Ecommerce

• CVE-2007-3081 - CVSS 7.5 (high), 2007-06-06: PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the…
• CVE-2005-2544 - CVSS 5 (medium), 2005-08-10: PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the path[docroot]…
• CVE-2005-2543 - CVSS 5 (medium), 2005-08-10: Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbitrary files via a .. (dot dot) in the…
• CVE-2005-2138 - CVSS 4.3 (medium), 2005-07-05: Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via…