CVE-2013-10008

9.8 criticalEPSS 0.7%

Critical (9.8) in eshop project eshop. EPSS 0.7% chance of exploitation in the next 30 days.

A vulnerability was found in sheilazpy eShop. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. The name of the patch is e096c5849c4dc09e1074104531014a62a5413884. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217572.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-01-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

eshop_project:eshop

References

https://github.com/sheilazpy/eShop/commit/e096c5849c4dc09e1074104531014a62a5413884
https://vuldb.com/?ctiid.217572
https://vuldb.com/?id.217572
https://github.com/sheilazpy/eShop/commit/e096c5849c4dc09e1074104531014a62a5413884
https://vuldb.com/?ctiid.217572

Check your stack JSON