Comdev Comdev Ecommerce — known CVE vulnerabilities

Every CVE whose affected-product data names Comdev Comdev Ecommerce, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2007-3081 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP…
• CVE-2005-2543 — CVSS 5.0 (medium): Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbitrary files via a…
• CVE-2005-2544 — CVSS 5.0 (medium): PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the…
• CVE-2005-2138 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web…