Vulnerabilities

TI-2021-12075 CVE-2021-32172 · GHSA-p6pf-mpv2-5j87

Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a…

HIGH 78

Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.66433 Published 2021-10-07 No fix listed CWE-862

TI-2008-02124 CVE-2008-2212 · GHSA-rccf-5pfw-f89w

Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_adminheader, (2) msg_adminheader2, (3) msg_adminheader3, (4) msg_adminhe…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2008-05-14 No fix listed CWE-79

TI-2008-01029 CVE-2008-1075 · GHSA-pjwc-7xmf-rc5q

Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search command.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2008-02-29 No fix listed CWE-79

Vulnerabilities

Filters

Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a…

Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote…

Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote…