Vulnerabilities

TI-2007-04449 CVE-2007-4597 · GHSA-3qrc-q3x7-wr8m

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC…

LOW 35

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to execute arbitrary SQL commands via the s[cid] parameter in a search_list action, a different vector th…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01006 Published 2007-08-30 No fix listed CWE-89

TI-2007-02461 CVE-2007-2549 · GHSA-2f4x-p9hx-9v3c

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0…

LOW 35

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute arbitrary SQL commands via the (1) c or (2) quantity parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01195 Published 2007-05-09 No fix listed

TI-2007-02460 CVE-2007-2548 · GHSA-9278-w4jw-67jj

Unspecified vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 has…

LOW 30

Unspecified vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 has unknown impact and an l remote attack vector, related to "Cookie Manipulation."

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.0101 Published 2007-05-09 No fix listed

TI-2007-02459 CVE-2007-2547 · GHSA-8pxx-h62p-4h8x

Cross-site scripting (XSS) vulnerability in index.php in TurnkeyWebTools SunShop Shopping…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to inject arbitrary web script or HTML via the l parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0157 Published 2007-05-09 No fix listed

TI-2007-02390 CVE-2007-2474 · GHSA-p2r3-9xrf-64q4

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping…

MEDIUM 42

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) include/payment/payflow_pr…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06163 Published 2007-05-02 No fix listed

TI-2007-01991 CVE-2007-2070 · GHSA-4rcf-f8m4-g24g

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping…

MEDIUM 45

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php or (2)…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09423 Published 2007-04-18 No fix listed CWE-94

TI-2006-03927 CVE-2006-4052 · GHSA-498f-h9wx-3822

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop…

MEDIUM 49

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) admin/index.php, (2)…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.16408 Published 2006-08-10 No fix listed

TI-2006-03926 CVE-2006-4051 · GHSA-3396-fm48-pqc5

PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live…

MEDIUM 44

PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.08295 Published 2006-08-10 No fix listed

TI-2006-02330 CVE-2006-2394 · GHSA-8xj2-j868-68wv

Cross-site scripting (XSS) vulnerability in chat.php in PHP Live Helper allows remote…

LOW 29

Cross-site scripting (XSS) vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01313 Published 2006-05-16 No fix listed

TI-2006-01431 CVE-2006-1478 · GHSA-63h5-7gwm-g5rx

Directory traversal vulnerability in (1) initiate.php and (2) possibly other PHP scripts…

LOW 37

Directory traversal vulnerability in (1) initiate.php and (2) possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to include and execute arb…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01975 Published 2006-03-29 No fix listed

TI-2006-01430 CVE-2006-1477 · GHSA-2w3q-v8m2-6m82

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper…

MEDIUM 41

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to include and execute arbitrary PHP code via the abs_path parameter in (1) initiate.php, (2) waiting.php…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04807 Published 2006-03-29 No fix listed

Vulnerabilities

Filters