zeuscart

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

zeuscart records in CISA KEV

No zeuscart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zeuscart 3 records MEDIUM

Records

4 records

TI-2018-15660 CVE-2018-25435 · GHSA-q7hr-57fw-68mm

ZeusCart 4.0 Deactivate Customer Accounts CSRF

HIGH 70

ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by crafting malicious requests.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00156 Published 2026-06-01 No fix listed CWE-352

TI-2014-03144 CVE-2014-3868 · GHSA-8x9f-wrrg-fpxv

Multiple SQL injection vulnerabilities in ZeusCart 4.x.

MEDIUM 43

Multiple SQL injection vulnerabilities in ZeusCart 4.x.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02461 Published 2020-01-31 No fix listed CWE-89

TI-2015-01947 CVE-2015-2183 · GHSA-73fc-22xj-hx85

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow…

LOW 39

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in a (1) disporders detail or (2) subadminmgt edit act…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03424 Published 2015-03-10 No fix listed CWE-89

TI-2009-04696 CVE-2009-4940 · GHSA-5j5p-26xm-6h27

SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote…

LOW 35

SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00923 Published 2010-07-22 No fix listed CWE-89

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0