CVE-2026-82922 in ECShopinfo

Prediction

by VulDB Data Team • 08/31/2026

A security vulnerability has been detected in ShopEx ECShop up to 2.5.1. This vulnerability affects the function flow_update_cart of the file /flow.php?step=update_cart. The manipulation of the argument rec_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsible

VulDB

Moderation

accepted

CPE

ready

Exploit

Download

EPSS

0.00000

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-82922
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-82922
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-82922/

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!