GCVE - cpe:2.3:a:watersweb_shops:shop_kit

Approved changes feed: RSS · Atom

cpe:2.3:a:watersweb_shops:shop_kit_plus:initial:*:*:*:*:*:*:*

part: a version: initial update: *

Vendor	Watersweb Shops (`fbc175d0-d287-5631-8e76-2b758e7fe191`)
Product	Shop Kit Plus (`1825ec10-9298-5a24-b7ee-ade5534aeaad`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-1128`	vulnerable	2026-06-08 04:49:41.510902	Details available shopkitplus allows remote attackers to obtain sensitive information via a request to (1) events.php with a curmonth[]=01 query string or (2) enc/stylecss.php with a changetheme[]= query string, which reveals the path in various error messages. Published: 2007-02-27T02:00:00.000Z Updated: 2024-08-07T12:43:22.489Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/461071/100/0/threaded http://osvdb.org/33757 http://securityreason.com/securityalert/2295 http://osvdb.org/33756 https://exchange.xforce.ibmcloud.com/vulnerabilities/32661	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1127`	vulnerable	2026-06-08 04:49:41.510502	Details available Directory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to read arbitrary files via a .. (dot dot) in the changetheme parameter. Published: 2007-02-27T02:00:00.000Z Updated: 2024-08-07T12:43:22.556Z Open on db.gcve.eu Reference links http://secunia.com/advisories/24279 http://www.securityfocus.com/bid/22697 http://www.securityfocus.com/archive/1/461071/100/0/threaded http://www.vupen.com/english/advisories/2007/0747 https://exchange.xforce.ibmcloud.com/vulnerabilities/32660	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.