GCVE - cpe:2.3:a:seotoaster:seotoaster:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:seotoaster:seotoaster:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Seotoaster (`ecf9db55-8ba2-5de1-9673-2bcb8116bc2b`)
Product	Seotoaster (`aa65001f-6c67-5dbd-a4d5-495e67ae935e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/seotoaster-team/seotoaster`	purl2cpe	2026-06-01 10:12:34.190403
`pkg:sourceforge/seotoaster`	purl2cpe	2026-06-01 10:12:34.190406

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-25577`	vulnerable	2026-06-08 05:13:42.597089	SeoToaster Ecommerce 3.0.0 Local File Inclusion via backend_theme MEDIUM (5.5) SeoToaster Ecommerce 3.0.0 contains a local file inclusion vulnerability that allows authenticated attackers to read arbitrary files by manipulating path parameters in backend theme endpoints. Attackers can send POST requests to /backend/backend_theme/editcss/ or /backend/backend_theme/editjs/ with directory traversal sequences in the getcss or getjs parameters to retrieve file contents. Published: 2026-03-21T15:30:36.380Z Updated: 2026-03-23T16:24:31.805Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/46190 https://www.seotoaster.com/shopping-cart/ https://www.seotoaster.com/downloads/seotoaster.v3.0.0.zip https://www.vulncheck.com/advisories/seotoaster-ecommerce-local-file-inclusion-via-backend-theme	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-5230`	vulnerable	2026-06-08 04:59:35.219192	Details available Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoaster_core/application/models/LoginModel.php in Seotoaster 1.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login parameter to sys/login/index or (2) memberLoginName parameter to sys/login/member. Published: 2012-10-25T17:00:00.000Z Updated: 2024-08-07T00:30:46.856Z Open on db.gcve.eu Reference links http://www.infoserve.de/system/files/advisories/INFOSERVE-ADV2011-06.txt http://osvdb.org/77736 https://exchange.xforce.ibmcloud.com/vulnerabilities/71843 http://secunia.com/advisories/46881 http://www.exploit-db.com/exploits/18246	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.