Approved changes feed: RSS · Atom

cpe:2.3:a:tosei-corporation:online_store_management_system:4.0.4:*:*:*:*:*:*:*

part: a version: 4.0.4 update: *

VendorTosei Corporation (37cecf7c-b9a3-5cf0-b06e-d83e4b0b039c)
ProductOnline Store Management System (30ef0865-5b98-5f2b-9ce4-2a292e1c6f73)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7898 vulnerable 2026-06-08 06:58:23.862168 Tosei Online Store Management System ネット店舗管理システム Backend default credentials
HIGH (7.3)
A vulnerability classified as critical was found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. This vulnerability affects unknown code of the component Backend. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-17T18:00:05.693Z
Updated: 2024-08-19T14:55:22.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7897 vulnerable 2026-06-08 06:58:23.853013 Tosei Online Store Management System ネット店舗管理システム tosei_kikai.php command injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. This affects an unknown part of the file /cgi-bin/tosei_kikai.php. The manipulation of the argument kikaibangou leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-17T15:00:06.136Z
Updated: 2024-08-19T16:55:05.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7896 vulnerable 2026-06-08 06:58:23.852187 Tosei Online Store Management System ネット店舗管理システム p1_ftpserver.php command injection
MEDIUM (6.3)
A vulnerability was found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cgi-bin/p1_ftpserver.php. The manipulation of the argument adr_txt leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-17T13:31:03.558Z
Updated: 2024-08-19T17:08:41.085Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.