Rezultati pretraživanja za 'Proizvođač: zen-cart'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2008-6616 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in the advanced_search_result page. NOTE: the provenance of this information | 2017-08-17 01:29:00 | 2009-04-06 18:30:00 |
| CVE-2008-6615 | 7.5 | SQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to execute arbitrary SQL commands via the keyword parameter in the advanced_search_result page. NOTE: the provenance of this information is unknown; the d | 2017-08-17 01:29:00 | 2009-04-06 18:30:00 |
| CVE-2017-11675 | 6.5 | The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array ind | 2017-08-04 19:53:00 | 2017-07-27 06:29:00 |
| CVE-2006-4218 | 7.5 | Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter. | 2017-07-20 01:32:00 | 2006-08-17 23:04:00 |
| CVE-2006-4215 | 5.1 | PHP remote file inclusion vulnerability in index.php in Zen Cart 1.3.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the autoLoadConfig[999][0][loadFile] parameter. | 2017-07-20 01:32:00 | 2006-08-17 21:04:00 |
| CVE-2006-4214 | 7.5 | Multiple SQL injection vulnerabilities in Zen Cart 1.3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) GPC data to the ipn_get_stored_session function in ipn_main_handler.php, which can be leveraged to modify elements | 2017-07-20 01:32:00 | 2006-08-17 21:04:00 |
| CVE-2006-0698 | 10.0 | Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vectors related to "other attempted exploits" other than SQL injection. | 2017-07-20 01:29:00 | 2006-02-15 11:06:00 |
| CVE-2006-0696 | 7.5 | SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 2017-07-20 01:29:00 | 2006-02-15 11:06:00 |
| CVE-2017-10667 | 4.3 | In index.php in Zen Cart 1.6.0, the products_id parameter can cause XSS. | 2017-07-03 14:37:00 | 2017-06-29 00:29:00 |
| CVE-2017-8833 | 4.3 | Zen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of "Download latest in-development version from github." | 2017-05-30 18:19:00 | 2017-05-08 06:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/4
Zapisa po stranici: