CVE-2021-27190

概要

参考情報

• advisto/peel-shopping · Patch
• anmolksachan/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS · Exploit
• vulf/Peel-Shopping-cart-9.4.0-Stored-XSS · Exploit
• peel-shopping.com/modules/telechargement/telecharger.php · Product
• secuneus.com/cve-2021-27190-peel-shopping-ecommerce-shopping-cart-stored-cross-site-scripting-vulnerability-in-address · Exploit

peel shopping のその他の脆弱性

• CVE-2021-41672中 6.5PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user that belongs to the administrator group can…
• CVE-2021-37593緊急 9.1PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest (unauthenticated) can inject a malicious SQL query in order to …
• CVE-2019-20178中 6.5Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user.
• CVE-2018-20848高 8.8Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in t…
• CVE-2018-1000887中 4.8Peel shopping peel-shopping_9_1_0 version contains a Cross Site Scripting (XSS) vulnerability that can result in an authenticated user injec…