Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Sazcart Component: Sazcart Clear all filters
TI-2008-02311 CVE-2008-2411 · GHSA-8crq-7xw5-3644

SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when…

Priority LOW 32

SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a details action.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01123 Published 2008-05-22 No fix listed CWE-89
TI-2008-02136 CVE-2008-2224 · GHSA-cj7j-wc7c-92fh

Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when…

Priority LOW 34

Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) _saz[settings][site_dir] parameter to layou…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01986 Published 2008-05-14 No fix listed CWE-94