Vulnerabilities

TI-2007-05058 CVE-2007-5253 · GHSA-xg7x-r7p4-phg6

c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read…

LOW 34

c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName parameter in a GetImage action, by appending a NULL byte (%00) sequence followed by an image file exten…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0887 Published 2007-10-06 No fix listed CWE-20

TI-2004-00616 CVE-2004-0675 · GHSA-r3c7-pw39-8hrx

Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32…

LOW 37

Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04243 Published 2004-07-13 No fix listed

TI-2000-00430 CVE-2000-0430 · GHSA-27gf-ff72-jfqr

Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.

LOW 32

Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05917 Published 2000-10-13 No fix listed

TI-2000-00429 CVE-2000-0429 · GHSA-qr5c-3r3w-6h26

A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.

LOW 39

A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03242 Published 2000-06-15 No fix listed

TI-2000-00136 CVE-2000-0136 · GHSA-h9x3-27xw-3788

The Cart32 shopping cart application allows remote users to modify sensitive purchase…

MEDIUM 43

The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0683 Published 2000-02-08 No fix listed

Vulnerabilities

Filters

c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read…

Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32…

Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.

A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.

The Cart32 shopping cart application allows remote users to modify sensitive purchase…