Vulnerabilities

TI-2009-04445 CVE-2009-4689 · GHSA-5j7r-m8gm-mhjj

SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script…

LOW 35

SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00993 Published 2010-03-10 No fix listed CWE-89

TI-2009-04444 CVE-2009-4688 · GHSA-72cm-h79h-7p2p

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the (1) txtkeywords and (2) cid parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0307 Published 2010-03-10 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script…

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart…