Pilotcart

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Pilotcart records in CISA KEV

No Pilotcart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pilot Cart 4 records LOW

Records

4 records in Pilot Cart · all components

TI-2008-02570 CVE-2008-2688 · GHSA-5582-39pc-mhm8

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote…

LOW 37

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02007 Published 2008-06-13 No fix listed CWE-89

TI-2010-04595 CVE-2010-4872 · GHSA-gfqf-mg2m-6mfr

SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote…

LOW 35

SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the specific parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0099 Published 2011-10-07 No fix listed CWE-89

TI-2010-04355 CVE-2010-4632 · GHSA-fj3j-c3hf-8gqj

Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the (1) article parameter to kb.asp, (2) specific parameter to cart.asp, (3) countrycode param…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2010-12-30 No fix listed CWE-89

TI-2010-04354 CVE-2010-4631 · GHSA-5fjr-xvv2-4qf4

Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) countrycode parameter to contact.asp, USERNAME parameter to (2) gate…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01776 Published 2010-12-30 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0