CVE-2020-18477

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

CVE-2020-18476

SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usdimage field...

CVE-2020-18476

HuCartCMS 5.7.4 is affected by a SQL injection vulnerability in the usd_image field (reported as header/avatar usd_image in some sources). The CVE-2020-18476 entry documents a SQLi in HuCartCMS 5.7.4 via this field, with high severity in CVSS 3.1 (8.8) and medium in CVSS 2.0 (6.5). Concrete detai...

CVE-2020-18475

HuCartCMS 5.7.4 is affected by a Cross-Site Scripting (XSS) vulnerability in the mes_title field of the outbox header. The vulnerability arises from insufficient input sanitization, allowing an attacker to inject a malicious script that executes when other users open the email. Affected component...

CVE-2020-18475

Cross Site Scripting XSS vulnerabilty exists in Hucart CMS 5.7.4 is via the mestitle field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed...

CVE-2020-18158

Cross Site Scripting XSS vulnerability in HuCart 5.7.4 via nickname in index.php...

CVE-2020-18158

Cross Site Scripting XSS vulnerability in HuCart 5.7.4 via nickname in index.php...

Cross site scripting

Cross Site Scripting XSS vulnerability in HuCart 5.7.4 via nickname in index.php...

HuCart 跨站脚本漏洞

HuCart HuCart is a PHP Mysql-based free open source enterprise website system. HuCart 5.7.4 has a cross-site scripting vulnerability, which can be exploited by attackers to conduct cross-site scripting attacks via the nickname in index.php...

HuCart Cross-Site Scripting Vulnerability

HuCart HuCart is a PHP Mysql-based free open source enterprise website system. HuCart 5.7.4 has a cross-site scripting vulnerability, which can be exploited by attackers to conduct cross-site scripting attacks via the nickname in index.php...

CVE-2020-18158

Technical details about CVE-2020-18158 are not publicly provided in the supplied documents. No confirmed affected versions or fixes are listed here. Monitor for updates from vendors and security advisories.

CVE-2020-18158

Cross Site Scripting XSS vulnerability in HuCart 5.7.4 via nickname in index.php...

HuCart suffers from SQL injection vulnerability (CNVD-2021-54014)

HuCart is a leading enterprise building system, based on PHP Mysql architecture, can run on Linux, Windows and other various server platforms. HuCart suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

HuCart suffers from SQL injection vulnerability (CNVD-2021-54015)

HuCart is an enterprise building system, based on PHP Mysql architecture, can run on Linux, Windows and other various server platforms, regular environment. HuCart has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

HuCart suffers from SQL injection vulnerability (CNVD-2021-54040)

HuCart is an open source enterprise building system. HuCart has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

HuCart suffers from SQL injection vulnerability (CNVD-2021-54042)

HuCart is an open source enterprise building system. HuCart has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

HuCart suffers from SQL injection vulnerability (CNVD-2021-55382)

HuCart is an enterprise building system, based on PHP Mysql architecture, can run on Linux, Windows and other various server platforms, regular environment. HuCart has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

HuCart suffers from SQL injection vulnerability

HuCart is an open source enterprise building system. HuCart has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

HuCart v5.7.9 suffers from SQL injection vulnerability

HuCart is a leading enterprise building system, based on PHP Mysql architecture, can run on Linux, Windows and other various server platforms, regular environment, can support millions of data. HuCart v5.7.9 suffers from a SQL injection vulnerability that can be exploited by attackers to obtain...

HuCart suffers from SQL injection vulnerability (CNVD-2021-54041)

HuCart is an open source enterprise building system. HuCart has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...