Vendors / Phpcart Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Phpcart records in CISA KEV No Phpcart vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 28
phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2) postage parameters.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03008 · Published 2005-05-02 · No fix listed CWE-20
Priority LOW 22
Multiple cross-site scripting (XSS) vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) quantity or (2) Add Engraving fields to the default URI;…
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01022 · Published 2009-08-28 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0