Abcprintf - vulnerabilities (CVEs)

6 CVEs in 2 products, 0 in the last 30 days, newest from 2019-12-23.

Products

CVE-2019-8293 - CVSS 9.8 (critical), 2019-12-23: Due to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be uploaded to the web root allowing code execution.
CVE-2019-8290 - CVSS 6.1 (medium), 2019-10-01: Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sent_register.php…
CVE-2019-8289 - CVSS 5.4 (medium), 2019-10-01: Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variable
CVE-2019-8292 - CVSS 5.3 (medium), 2019-10-01: Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion.
CVE-2019-8288 - CVSS 5.4 (medium), 2019-10-01: Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanitized.
CVE-2019-8291 - CVSS 7.5 (high), 2019-10-01: Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.