Vulnerabilities

TI-2014-06827 CVE-2014-8307 · GHSA-65hv-mx44-f24c

Multiple cross-site scripting (XSS) vulnerabilities in skins/default/outline.tpl in…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) path parameter in the "drop down…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01489 Published 2014-10-16 No fix listed CWE-79

TI-2014-06826 CVE-2014-8306 · GHSA-ch8c-gqr5-2jv8

SQL injection vulnerability in the sql_query function in cart.php in C97net Cart Engine…

LOW 35

SQL injection vulnerability in the sql_query function in cart.php in C97net Cart Engine before 4.0 allows remote attackers to execute arbitrary SQL commands via the item_id variable, as demonstrated by the (1) item_id[0]…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01241 Published 2014-10-16 No fix listed CWE-89

TI-2014-06825 CVE-2014-8305 · GHSA-h7xq-588x-q4f8

Open redirect vulnerability in the redir function in includes/function.php in C97net Cart…

LOW 36

Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the H…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.04922 Published 2014-10-16 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in skins/default/outline.tpl in…

SQL injection vulnerability in the sql_query function in cart.php in C97net Cart Engine…

Open redirect vulnerability in the redir function in includes/function.php in C97net Cart…