Vulnerabilities

TI-2007-03342 CVE-2007-3448 · GHSA-6w4j-qpvm-2vvx

Cross-site scripting (XSS) vulnerability in index.php in BugMall Shopping Cart 2.5 and…

LOW 24

Cross-site scripting (XSS) vulnerability in index.php in BugMall Shopping Cart 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the msgs parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01864 Published 2007-06-27 No fix listed CWE-79

TI-2007-03341 CVE-2007-3447 · GHSA-93f5-22qw-63mg

SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote…

LOW 32

SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the "basic search box." NOTE: 4.0.2 and other versions might also be affected.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0114 Published 2007-06-27 No fix listed CWE-89

TI-2007-03340 CVE-2007-3446 · GHSA-96j2-crfj-6gpp

BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo,"…

MEDIUM 43

BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which allows remote attackers to obtain login access.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07703 Published 2007-06-27 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in BugMall Shopping Cart 2.5 and…

SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote…

BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo,"…