Browse CVEs

HIGH 8.1 CVE-2025-51605 An issue was discovered in Shopizer 3.2.7. The server's CORS implementation reflects the client-supplied Origin header verbatim into Access-Control-A… Shopizer No fix yet Fix from $1,9502025-08-22 HIGH 8.8 CVE-2022-23063 In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administ… Shopizer after 3.0.1 Fix from $1,9502022-05-03 MEDIUM 6.5 CVE-2022-23061 In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although this cannot happen according to the documentation) v… Shopizer after 2.17.0 Fix from $1,6002022-05-01 MEDIUM 5.4 CVE-2020-11006 In Shopizer before version 2.11.0, a script can be injected in various forms and saved in the database, then executed when information is fetched fro… Shopizer 2.11.0+ Fix from $1,6002020-05-08 MEDIUM 6.5 CVE-2020-11007 In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shop… Shopizer 2.11.0+ Fix from $1,6002020-04-16 MEDIUM 5.0 CVE-2014-5385 com/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not restrict the number of authentication attempts, which make… Shopizer after 1.1.5 Fix from $1,6002014-08-21 MEDIUM 6.8 CVE-2014-4963 Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.customerId parameter to shop/pr… Shopizer after 1.1.5 Fix from $1,6002014-07-15 MEDIUM 6.8 CVE-2014-4964 Multiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hijack the authentication of users… Shopizer after 1.1.5 Fix from $1,6002014-07-15 MEDIUM 6.4 CVE-2014-4962 Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuantity param… Shopizer after 1.1.5 Fix from $1,6002014-07-15