TI-2011-00922 CVE-2011-1069 · GHSA-mvv3-447c-gwqm
PHPShop through 0.8.1 has XSS.
Priority LOW 28
PHPShop through 0.8.1 has XSS.
Vulnerabilities
6 records
TI-2010-04559 CVE-2010-4836 · GHSA-mh8r-x9cq-9xpw
Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to inject arbitrary web script or HTML via the name_new parameter.
TI-2009-04328 CVE-2009-4572 · GHSA-hwm9-x6m4-cf3c
Cross-site request forgery (CSRF) vulnerability in PhpShop 0.8.1 allows remote attackers…
Priority LOW 31
Cross-site request forgery (CSRF) vulnerability in PhpShop 0.8.1 allows remote attackers to hijack the authentication of arbitrary users for requests that invoke the cartAdd function in a shop/cart action to the default…
TI-2009-04327 CVE-2009-4571 · GHSA-wwv2-hq48-3mr9
Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote…
Priority LOW 37
Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL commands via the (1) module_id parameter in an admin/function_list action, the (2) vendor_id parameter…
TI-2009-04326 CVE-2009-4570 · GHSA-ggvq-2qg5-hr73
Cross-site scripting (XSS) vulnerability in PhpShop 0.8.1 allows remote attackers to…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in PhpShop 0.8.1 allows remote attackers to inject arbitrary web script or HTML via the order_id parameter in an order/order_print action to the default URI.
TI-2008-00649 CVE-2008-0681 · GHSA-wg47-xqc5-g367
SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to…
Priority LOW 34
SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the product_id parameter, as demonstrated by a shop/flypage action.