Vendors / Mcmurtrey Whitaker And Associates Mcmurtrey Whitaker And Associates Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Mcmurtrey Whitaker And Associates records in CISA KEV No Mcmurtrey Whitaker And Associates vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0683 · Published 2000-02-08 · No fix listed
Priority LOW 39
A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03242 · Published 2000-06-15 · No fix listed
Priority LOW 37
Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command.
CVSS 2.0 MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04243 · Published 2004-07-13 · No fix listed
Priority LOW 34
c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName parameter in a GetImage action, by appending a NULL byte (%00) sequence followed by an image file exten…
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0887 · Published 2007-10-06 · No fix listed CWE-20
Priority LOW 32
Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05917 · Published 2000-10-13 · No fix listed
Open these records in search → All records by CVSS severity
0 2 3 0 0
THREATIST.IORead the docs