Export limit exceeded: 10821 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-12380

Reflected XSS in Akıllı Ticaret's E-Commerce Pack

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Akilli Commerce Software Technologies Ltd. Co.
Products
E-commerce Pack
CVE-2026-4378

Stored XSS in Akıllı Ticaret's E-Commerce Pack

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 before 4.6.001.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Akilli Commerce Software Technologies Ltd. Co.
Products
E-commerce Pack
CVE-2025-11024

SQLi in Akıllı Ticaret's E-Commerce Pack

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Blind SQL Injection. This issue affects E-Commerce Website: before 4.5.001.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Akilli Commerce Software Technologies Ltd. Co.
Products
E-commerce Website
CVE-2026-2347

IDOR in Akıllı Ticaret's E-Commerce Pack

Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Session Hijacking. This issue affects E-Commerce Website: before 4.5.001.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Akilli Commerce Software Technologies Ltd. Co.
Products
E-commerce Website
CVE-2025-6577

SQLi in Akilli Commerce's E-Commerce Website

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows SQL Injection. This issue affects E-Commerce Website: before 4.5.001.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Akilli Commerce Software Technologies Ltd. Co.
Products
E-commerce Website