CNNVD-202509-026 Information
Sep 01, 2025
cve
CNNVD ID
CNNVD-202509-026
Related CVE
- CNNVD Published: 2025-09-01
Description (Chinese)
expressCart是Mark Moffat个人开发者的一个购物车软件。 expressCart存在安全漏洞，该漏洞源于对文件/admin/product/edit/的错误操作导致注入攻击。
Description (English)
ExpressCart is a shopping car software for Mark Moffat personal developers. There is a security loophole in expressCart, which stems from the mishandling of the document/admin/product/edit/ resulting in the injection of the attack.
Hazard Level
Critical
Vulnerability Type
其他
Affected Vendor
个人开发者
Published
2025-09-01
Last Modified
2026-02-24
References
https://vuldb.com/?submit.641127 https://vuldb.com/?id.322112 https://vuldb.com/?ctiid.322112 https://github.com/mrvautin/expressCart/issues/288#issue-3287867610 https://access.redhat.com/security/cve/cve-2025-9797 https://nvd.nist.gov/vuln/detail/CVE-2025-9797
Share on: