Lucene search
+L

CVE-2014-8307

🗓️ 16 Oct 2014 19:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 73 Views🌐 WEB

CVE-2014-8307: XSS vulnerabilities in C97net Cart Engine before 4.

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cvelist
Cvelist
CVE-2014-8307
16 Oct 201419:00
cvelist
exploitdb
Exploit DB
Cart Engine 3.0 - Multiple Vulnerabilities
25 Sep 201400:00
exploitdb
euvd
EUVD
EUVD-2014-8148
7 Oct 202500:30
euvd
nvd
NVD
CVE-2014-8307
16 Oct 201419:55
nvd
prion
Prion
Cross site scripting
16 Oct 201419:55
prion
redhatcve
RedhatCVE
CVE-2014-8307
22 May 202513:32
redhatcve
NVD
Node
c97cart_engineRange3.0
ParameterPositionPathDescriptionCWE
pathquery paramindex.phpReflected XSS via unsanitized path parameter in dropdown top menu (with path) on multiple pages.CWE-79
pathquery paramcheckout.phpReflected XSS via unsanitized path parameter in dropdown top menu (with path) on checkout page.CWE-79
pathquery paramcontact.phpReflected XSS via unsanitized path parameter in dropdown top menu (with path) on contact page.CWE-79
pathquery paramdetail.phpReflected XSS via unsanitized path parameter in dropdown top menu (with path) on detail page.CWE-79
pathquery paramdistro.phpReflected XSS via unsanitized path parameter in dropdown top menu (with path) on distro page.CWE-79
pathquery paramnewsletter.phpReflected XSS via unsanitized path parameter in dropdown top menu (with path) on newsletter page.CWE-79
pathquery parampage.phpReflected XSS via unsanitized path parameter in dropdown top menu (with path) on page page.CWE-79
pathquery paramprofile.phpReflected XSS via unsanitized path parameter in dropdown top menu (with path) on profile page.CWE-79
pathquery paramsearch.phpReflected XSS via unsanitized path parameter in dropdown top menu (with path) on search page.CWE-79
pathquery paramsitemap.phpReflected XSS via unsanitized path parameter in dropdown top menu (with path) on sitemap page.CWE-79
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:16Current
5.9Medium risk
Vulners AI Score5.9
CVSS 24.3
EPSS0.01489
73