Rezultati pretraživanja za 'Proizvođač: zen-cart'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2007-3597 | 8.5 | Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter. | 2018-10-15 21:29:00 | 2007-07-06 18:30:00 |
| CVE-2008-6986 | 6.8 | SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes/shopping_cart.php in Zen Cart 1.3.0 through 1.3.8a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the products | 2018-10-11 20:57:00 | 2009-08-19 05:24:00 |
| CVE-2008-6985 | 6.8 | Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when (1) adding or (2) upd | 2018-10-11 20:57:00 | 2009-08-19 05:24:00 |
| CVE-2009-4322 | 5.0 | extras/ipn_test_return.php in Zen Cart allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message. | 2018-10-10 19:49:00 | 2009-12-14 23:30:00 |
| CVE-2009-4321 | 5.0 | extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote attackers to read arbitrary files via a file:// URI. NOTE: some of these details are obtained from third party information. | 2018-10-10 19:49:00 | 2009-12-14 23:30:00 |
| CVE-2015-0882 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition) 1.3 jp through 1.3.0.2 jp8 and 1.5 ja through 1.5.1 ja allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to | 2017-12-07 21:33:00 | 2015-02-27 02:59:00 |
| CVE-2009-2255 | 6.8 | Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/record_company.php, which allows remote attackers to execute arbitrary code by uploading a .php file via the record_company_image parameter in conjunction wi | 2017-09-19 01:29:00 | 2009-06-30 10:30:00 |
| CVE-2009-2254 | 7.5 | Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to execute arbitrary SQL commands via the query_string parameter in an execute action, in conjunction with a PATH | 2017-09-19 01:29:00 | 2009-06-30 10:30:00 |
| CVE-2011-4567 | 4.3 | Cross-site scripting (XSS) vulnerability in includes/templates/template_default/templates/tpl_gv_send_default.php in Zen Cart before 1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a gv_send action to i | 2017-08-29 01:30:00 | 2011-11-29 00:55:00 |
| CVE-2011-4547 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in includes/templates/template_default/common/tpl_header_test_info.php in Zen Cart 1.3.9h, when debugging is enabled, might allow remote attackers to inject arbitrary web script or HTML via the (1) | 2017-08-29 01:30:00 | 2011-11-29 00:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/4
Zapisa po stranici: