https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T04:44:55.800357+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-33277 cnvd-2017-33277 2026-10-25T04:44:55.803798+00:00 cnvd-2017-33277 https://cve.radiocsirt.org/vuln/euvd-2026-168912 EUVD-2026-168912 2026-10-25T04:44:55.803830+00:00 EUVD-2026-168912 https://cve.radiocsirt.org/vuln/fkie_cve-2015-9226 fkie_cve-2015-9226 2026-10-25T04:44:55.803845+00:00

Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute arbitrary SQL commands via the download parameter in the (1) check_download and possibly (2) check_filename function in upload/admin2/model/products/model_admin_download.php or remote authenticated users with a valid Paypal transaction token to execute arbitrary SQL commands via the ref parameter in the (3) orderUpdate function in upload/catalog/extension/payment/paypal.php.

 https://cve.radiocsirt.org/vuln/ghsa-h2m6-hwwx-w627 GHSA-h2m6-hwwx-w627 2026-10-25T04:44:55.803874+00:00

Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute arbitrary SQL commands via the download parameter in the (1) check_download and possibly (2) check_filename function in upload/admin2/model/products/model_admin_download.php or remote authenticated users with a valid Paypal transaction token to execute arbitrary SQL commands via the ref parameter in the (3) orderUpdate function in upload/catalog/extension/payment/paypal.php.

 https://cve.radiocsirt.org/vuln/gsd-2015-9226 gsd-2015-9226 2026-10-25T04:44:55.803893+00:00 gsd-2015-9226