Vanguard Project CVEs and Security Vulnerabilities

Export limit exceeded: 425871 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2017-17873

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed

Vendors

Vanguard Project

Products

Marketplace Digital Products Php

CVE-2017-17874

Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI.

CVSS 3.0 · 8.8 High EPSS 6.0% KEV · Not listed

Vendors

Vanguard Project

Products

Marketplace Digital Products Php

CVE-2017-17936

Vanguard Marketplace Digital Products PHP has CSRF via /search.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Vanguard Project

Products

Marketplace Digital Products Php

CVE-2017-17937

Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Vanguard Project

Products

Marketplace Digital Products Php

CVE-2020-15537

An issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new title field, a product field to the p/ URI, or the Products Search box.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed

Vendors

Vanguard Project

Products

Vanguard

Page 1 of 1.