Ecshop CVE-2023-39112

MEDIUM

Improper Authentication (CWE-287)

2023-08-04 cve@mitre.org

Authentication Bypass Ecshop Shopex

6.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Aug 04, 2023 - 17:15 nvd

MEDIUM 6.5

DescriptionNVD

ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel.

AnalysisAI

ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel. Affected products include: Shopex Ecshop.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.

More in Ecshop

View all

CVE-2023-0783 CRITICAL Act Now POC

A vulnerability was found in EcShop 4.1.5. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitabl

CVE-2021-43679 CRITICAL Act Now POC

ecshop v2.7.3 is affected by a SQL injection vulnerability in shopex\ecshop\upload\api\client\api.php. Rated critical se

CVE-2024-1530 HIGH This Week POC

A vulnerability, which was classified as critical, has been found in ECshop 4.1.8. Rated high severity (CVSS 8.8), this

CVE-2023-5294 HIGH This Week POC

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Rated high severity (CVSS 8.8), this vulnerab

CVE-2023-5293 MEDIUM This Month POC

A vulnerability, which was classified as critical, was found in ECshop 4.1.5. Rated medium severity (CVSS 6.5), this vul

CVE-2026-82921 MEDIUM This Month POC

Unrestricted file upload in ShopEx ECShop 2.5.1 and earlier allows remote attackers to upload arbitrary file types by ma

CVE-2026-82922 MEDIUM This Month POC

Unauthenticated SQL injection in ShopEx ECShop up to version 2.5.1 exposes e-commerce installations to remote database c

CVE-2024-35362 MEDIUM This Month POC

Ecshop 3.6 is vulnerable to Cross Site Scripting (XSS) via ecshop/article_cat.php. Rated medium severity (CVSS 5.4), thi

CVE-2023-1185 HIGH This Week

A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. Rated high severity (CVSS 8.8), t

CVE-2023-1184 HIGH This Week

A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Rated high severity (CVSS 8.

Same weakness CWE-287 – Improper Authentication

View all

CVE-2022-40684 CRITICAL POC

CVE-2025-61882 CRITICAL POC

CVE-2020-0688 HIGH POC

CVE-2023-46805 HIGH POC

CVE-2023-35078 CRITICAL POC

CVE-2015-1187 CRITICAL POC

CVE-2024-7593 CRITICAL POC

CVE-2017-7921 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2022-40684 CRITICAL POC

CVE-2025-61882 CRITICAL POC

CVE-2024-0012 CRITICAL POC

CVE-2023-46805 HIGH POC

Share

CVE-2023-39112 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy