Lucene search
+L

CVE-2008-7108

🗓️ 28 Aug 2009 15:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 45 Views🌐 WEB

Multiple XSS vulnerabilities in Carmosa phpCart 3.4-4.6.4 allow remote attackers to inject arbitrary web script/HTML

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cvelist
Cvelist
CVE-2008-7108
28 Aug 200915:00
cvelist
euvd
EUVD
EUVD-2008-7067
7 Oct 202500:30
euvd
nvd
NVD
CVE-2008-7108
28 Aug 200915:30
nvd
prion
Prion
Cross site scripting
28 Aug 200915:30
prion
NVD
Node
ParameterPositionPathDescriptionCWE
quantityrequest bodyphpcart.phpMultiple XSS vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 via user-supplied input in phpcart.php (checkout and engraving fields).CWE-79
Add Engravingrequest bodyphpcart.phpMultiple XSS vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 via user-supplied input in phpcart.php (checkout and engraving fields).CWE-79
Engravingrequest bodyphpcart.phpMultiple XSS vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 via user-supplied input in phpcart.php (checkout and engraving fields).CWE-79
Namerequest bodyphpcart.phpMultiple XSS vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 via user-supplied input in phpcart.php (checkout and engraving fields).CWE-79
Companyrequest bodyphpcart.phpMultiple XSS vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 via user-supplied input in phpcart.php (checkout and engraving fields).CWE-79
Addressrequest bodyphpcart.phpMultiple XSS vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 via user-supplied input in phpcart.php (checkout and engraving fields).CWE-79
Cityrequest bodyphpcart.phpMultiple XSS vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 via user-supplied input in phpcart.php (checkout and engraving fields).CWE-79
Province/Staterequest bodyphpcart.phpMultiple XSS vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 via user-supplied input in phpcart.php (checkout and engraving fields).CWE-79
default URIrequest bodyphpcart.phpMultiple XSS vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 via user-supplied input in phpcart.php (checkout and engraving fields).CWE-79
(3) Quantity field to phpcart.phprequest bodyphpcart.phpMultiple XSS vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 via user-supplied input in phpcart.php (checkout and engraving fields).CWE-79
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:03Current
5.9Medium risk
Vulners AI Score5.9
CVSS 24.3
EPSS0.01022
45