Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: reality66 Component: Cart66 Lite Clear all filters
TI-2014-07669 CVE-2014-9442 · GHSA-pc3g-6g3q-7g7v

SQL injection vulnerability in models/Cart66Ajax.php in the Cart66 Lite plugin before…

Priority LOW 32

SQL injection vulnerability in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the q parameter in a promotionProductSearc…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01756 Published 2015-01-02 No fix listed CWE-89
TI-2014-07550 CVE-2014-9305 · GHSA-f337-c24p-gw2w

SQL injection vulnerability in the shortcodeProductsTable function in…

Priority LOW 35

SQL injection vulnerability in the shortcodeProductsTable function in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.2 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03609 Published 2014-12-08 No fix listed CWE-89