KnowbandCVEs & Vulnerabilities
2 CVEs affecting Knowband products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
one page checkout\, social login \& mailchimp 1supercheckout 1
CVE-2023-45384CRITICAL
KnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the module "Module One Page Checkout, Social Login & Mailchimp" (supercheckout), a guest can upload files with extensions .php
19 Oct 2023
9.8
CVSS
CVE-2023-44024CRITICAL
SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp (supercheckout) v.8.0.3 and before allows a remote attacker to execute arbitrary code via a crafted request to the updateCheckoutBehaviour function in the supercheckout.php component.
5 Oct 2023
9.8
CVSS
← PrevPage 1 / 1Next →