Vulnerabilities

TI-2005-01506 CVE-2005-1595 · GHSA-8jq8-8j5g-jgpj

CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote…

LOW 26

CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sensitive information via a direct request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01805 Published 2005-05-16 No fix listed

TI-2005-01505 CVE-2005-1594 · GHSA-6m9v-2m2c-qxv4

SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote…

LOW 36

SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01403 Published 2005-05-16 No fix listed

TI-2005-01504 CVE-2005-1593 · GHSA-w34c-hr35-wv8j

Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1…

LOW 37

Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04228 Published 2005-05-16 No fix listed

Vulnerabilities

Filters

CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote…

SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote…

Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1…