Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Picturespro Component: Picturespro Photo Cart Clear all filters
TI-2008-03630 CVE-2008-3788 · GHSA-w587-hm47-h5qm

Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when…

Priority LOW 32

Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) qtitle, (2) qid, and (3) qyear parameters to (…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01076 Published 2008-08-26 No fix listed CWE-89
TI-2008-03628 CVE-2008-3786 · GHSA-jhc7-f3vc-4pr5

Cross-site scripting (XSS) vulnerability in index.php in PICTURESPRO Photo Cart 3.9…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in index.php in PICTURESPRO Photo Cart 3.9 allows remote attackers to inject arbitrary web script or HTML via the qtitle parameter (aka "Gallery or event name" field) in a search…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01462 Published 2008-08-26 No fix listed CWE-79