Ectouch: >> Ectouch >> 2.0 Security Vulnerabilities
ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id'] parameter at \default\helpers\insert.php.
CVSS Score
9.8
EPSS Score
0.64
Published
2023-08-28
ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.
CVSS Score
9.1
EPSS Score
0.003
Published
2022-02-24
SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php..
CVSS Score
9.8
EPSS Score
0.002
Published
2021-07-30
SQL Injection Vulnerability in ECTouch v2 via the integral_min parameter in index.php.
CVSS Score
9.8
EPSS Score
0.002
Published
2021-07-14