Seotoaster
Approved changes feed: RSS · Atom
cpe:2.3:a:seotoaster:seotoaster:3.0.0:*:*:*:*:*:*:*
part: a version: 3.0.0 update: *
| Vendor | Seotoaster (ecf9db55-8ba2-5de1-9673-2bcb8116bc2b) |
|---|---|
| Product | Seotoaster (aa65001f-6c67-5dbd-a4d5-495e67ae935e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/seotoaster-team/seotoaster |
purl2cpe | 2026-06-01 10:12:34.192781 |
pkg:sourceforge/seotoaster |
purl2cpe | 2026-06-01 10:12:34.192783 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25577 |
vulnerable | 2026-06-08 05:13:42.596313 |
SeoToaster Ecommerce 3.0.0 Local File Inclusion via backend_theme
MEDIUM (5.5)
SeoToaster Ecommerce 3.0.0 contains a local file inclusion vulnerability that allows authenticated attackers to read arbitrary files by manipulating path parameters in backend theme endpoints. Attackers can send POST requests to /backend/backend_theme/editcss/ or /backend/backend_theme/editjs/ with directory traversal sequences in the getcss or getjs parameters to retrieve file contents.
Published: 2026-03-21T15:30:36.380Z
Updated: 2026-03-23T16:24:31.805Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.