Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2017-8110 Details

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:10 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://jgj212.blogspot.hk/2017/04/modified-ecommerce-shopsoftware-2022.html	CVE	Third Party Advisory
http://jgj212.blogspot.hk/2017/04/modified-ecommerce-shopsoftware-2022.html	[email protected]	Third Party Advisory

CWE-ID	CWE Name	Source
CWE-611	Improper Restriction of XML External Entity Reference	[email protected]

Product	Versions
modified-shop modified ecommerce shopsoftware	2.0.2.2 revision10690
CPE cpe:2.3:a:modified-shop:modified_ecommerce_shopsoftware:2.0.2.2:revision10690:::::: Remediation No remediation found in references.

6 change records found show changes

QUICK INFO