Approved changes feed: RSS · Atom

cpe:2.3:a:seotoaster:seotoaster_ecommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSeotoaster (ecf9db55-8ba2-5de1-9673-2bcb8116bc2b)
ProductSeotoaster Ecommerce (34b125e8-f443-5391-be84-ea0f35c996ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25577 vulnerable 2026-06-08 05:13:42.595564 SeoToaster Ecommerce 3.0.0 Local File Inclusion via backend_theme
MEDIUM (5.5)
SeoToaster Ecommerce 3.0.0 contains a local file inclusion vulnerability that allows authenticated attackers to read arbitrary files by manipulating path parameters in backend theme endpoints. Attackers can send POST requests to /backend/backend_theme/editcss/ or /backend/backend_theme/editjs/ with directory traversal sequences in the getcss or getjs parameters to retrieve file contents.
Published: 2026-03-21T15:30:36.380Z
Updated: 2026-03-23T16:24:31.805Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.