All packages
Vanguard Marketplace Digital Products PHP 1.4 vulnerabilities
3 known CVE vulnerabilities in Vanguard Marketplace Digital Products PHP 1.4, translated and rated.
- CVE-2017-17936High
Vanguard Marketplace Digital Products PHP has a CSRF vulnerability that occurs at the /search endpoint.
- CVE-2017-17874High
Vanguard Marketplace Digital Products PHP version 1.4 allows arbitrary file upload via an 'Add a new product' or 'Add a product preview' action, which can make a .php file accessible under an uploads/ URI.
- CVE-2017-17873Critical
Vanguard Marketplace Digital Products PHP version 1.4 is vulnerable to SQL Injection via the PATH_INFO parameter in the /p URI.