Skip to content
OpenAdvisories

Vendor

Razinsoft

2 known vulnerabilities.

Products

Ready eCommerce 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-63106

    ReadyEcommerce < 4.5.2 Unauthenticated SQL Injection via ProductController.php

    ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterization in ProductControl…

    Razinsoft Ready eCommerce