CVE-2025-40626

概要

参考情報

• incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-abantecart · Third Party Advisory

abantecart のその他の脆弱性

• CVE-2025-50972緊急 9.8SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via the tmpl_id paramete…
• CVE-2025-50971高 7.5Directory traversal vulnerability in AbanteCart version 1.4.2 allows unauthenticated attackers to gain access to sensitive system files via …
• CVE-2025-40627中 6.1Reflected Cross-Site Scripting (XSS) vulnerability in AbanteCart v1.4.0, that could allow an attacker to execute JavaScript code in a victim…
• CVE-2024-50802中 6.0A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_…
• CVE-2024-50801中 6.0A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_…