Skip to content
OpenAdvisories

Vendor

innocommerce

2 known vulnerabilities.

Products

InnoShop 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2026-108591

    InnoShop 0.9.2 Local File Disclosure via AI Core MCP file_upload Tool

    InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument. Attackers can supply file:// or php:// stre…

    innocommerce InnoShop