Cactusoft

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Cactusoft records in CISA KEV

No Cactusoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cactushop 4 records LOW Parodia 3 records LOW Cactushop Lite 1 record LOW

Records

4 records in Cactushop · all components

TI-2007-02960 CVE-2007-3061 · GHSA-wp63-7hgq-8f4j

Cactushop 6 and earlier stores sensitive information under the web root with insufficient…

LOW 39

Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) cactushop6.mdb or (2) cactushop5…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02582 Published 2007-06-06 No fix listed CWE-255

TI-2004-01756 CVE-2004-1881 · GHSA-6wpq-3g63-3x4f

SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x…

LOW 38

SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strItems parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03067 Published 2005-05-10 No fix listed

TI-2006-05773 CVE-2006-5991 · GHSA-j2c3-8wqj-x5xh

Multiple SQL injection vulnerabilities in wwweb concepts CactuShop allow remote attackers…

LOW 36

Multiple SQL injection vulnerabilities in wwweb concepts CactuShop allow remote attackers to execute arbitrary SQL commands via the (1) prodtype parameter in prodtype.asp and the (2) product parameter in product.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01452 Published 2006-11-21 No fix listed

TI-2004-01757 CVE-2004-1882 · GHSA-fpr6-3h88-qm2h

Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows…

LOW 27

Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote attackers to inject arbitrary web script or HTML via the strImageTag parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04031 Published 2005-05-10 No fix listed

Open these records in search →

Critical	0
High	3
Medium	5
Low	0
No CVSS	0