Tag

Cve-2026-82922

1 brief RSS

Unrestricted File Upload Vulnerability in ShopEx ECShop

ShopEx ECShop versions up to 2.5.1 contain an unrestricted file upload vulnerability in the check_img_type function that allows unauthenticated remote attackers to upload malicious files via the pack_img argument.

ECShop web-application-vulnerability remote-code-execution file-upload web-vulnerability sql-injection cve-2026-82922

2r 2t 1c 10m ago