Vulnerabilities

TI-2014-06888 CVE-2014-8377 · GHSA-4287-jrmh-3f8x

Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contac…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01427 Published 2014-10-21 No fix listed CWE-79

TI-2010-04582 CVE-2010-4859 · GHSA-gfm8-q2c2-q3gf

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers…

LOW 35

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blog_id parameter in a news action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01154 Published 2011-10-05 No fix listed CWE-89

TI-2010-01417 CVE-2010-1464 · GHSA-cq2c-xv58-j963

Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote attackers to inject arbitrary web script or HTML via the (1) currency_id_left, (2) currency_id_right, (3) darkcolor, (4) light…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2010-04-16 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows…

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers…

Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow…