Vulnerabilities

TI-2015-01946 CVE-2015-2182 · GHSA-wvj7-73j3-j4p2

Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers to inject arbitrary web script or HTML via the (1) schltr parameter in a brands action or (2) brand parameter in a viewbrands actio…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04454 Published 2015-03-11 No fix listed CWE-79

TI-2010-05019 CVE-2010-5322 · GHSA-gqfg-cx7w-hg3x

Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote…

LOW 25

Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02565 Published 2015-03-11 No fix listed CWE-79

TI-2015-01948 CVE-2015-2184 · GHSA-36v5-f5vm-q9j3

ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo…

LOW 34

ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08149 Published 2015-03-10 No fix listed CWE-200

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers…

Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote…

ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo…