CVE-2023-4548

A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3. This affects an unknown part of the file /search of the component GET Parameter Handler. The manipulation of the argument filterbrandid leads to sql injection. It is possible to initiate the attack remotely...

Sql injection

A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3. This affects an unknown part of the file /search of the component GET Parameter Handler. The manipulation of the argument filterbrandid leads to sql injection. It is possible to initiate the attack remotely...

CVE-2023-4548 SPA-Cart eCommerce CMS GET Parameter search sql injection

A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3. This affects an unknown part of the file /search of the component GET Parameter Handler. The manipulation of the argument filterbrandid leads to sql injection. It is possible to initiate the attack remotely...

CVE-2023-4548

CVE-2023-4548 affects SPA-Cart eCommerce CMS v1.9.0.3. A SQL injection flaw exists in the GET Parameter Handler’s GET parameter “filter[brandid]” within the /search endpoint, allowing remote abuse. Exploitation is demonstrated in public advisories and exploit listings (e.g., Exploit-DB, PacketSto...

CVE-2023-4547

A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search. The manipulation of the argument filterbrandid/filterprice leads to cross site scripting. The attack may be launched remotely...

CVE-2023-4547

A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search. The manipulation of the argument filterbrandid/filterprice leads to cross site scripting. The attack may be launched remotely...

Cross site scripting

A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search. The manipulation of the argument filterbrandid/filterprice leads to cross site scripting. The attack may be launched remotely...

CVE-2023-4547 SPA-Cart eCommerce CMS search cross site scripting

A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search. The manipulation of the argument filterbrandid/filterprice leads to cross site scripting. The attack may be launched remotely...

CVE-2023-4547

SPA-Cart eCommerce CMS 1.9.0.3 is affected by a cross-site scripting vulnerability in the /search endpoint. The issue stems from unsanitized input in the parameters filter[brandid] and filter[price] , which can be exploited remotely to inject script. Mitigation: upgrade to a version newer than 1....

SPA-Cart eCommerce CMS 跨站脚本漏洞

SPA-Cart eCommerce CMS is a CMS system from SPA-Cart. A cross-site scripting vulnerability exists in SPA-Cart eCommerce CMS version 1.9.0.3, which stems from the parameter filterbrandid/filterprice in the file /search can lead to cross-site scripting...

PT-2023-29560 · Unknown · Spa-Cart Ecommerce Cms

Name of the Vulnerable Software and Affected Versions: SPA-Cart eCommerce CMS version 1.9.0.3 Description: A vulnerability was found in the SPA-Cart eCommerce CMS, affecting some unknown functionality of the file /search. The manipulation of the arguments filterbrandid and filterprice leads to...

SPA-Cart eCommerce CMS SQL注入漏洞

SPA-Cart eCommerce CMS is a CMS system from SPA-Cart. A SQL injection vulnerability exists in SPA-Cart eCommerce CMS version 1.9.0.3, which stems from the parameter filterbrandid in the file /search that can lead to sql injection...

PT-2023-29563 · Unknown · Spa-Cart Ecommerce Cms

Name of the Vulnerable Software and Affected Versions: SPA-Cart eCommerce CMS version 1.9.0.3 Description: A critical vulnerability has been found in the GET Parameter Handler component of the /search file. The manipulation of the filterbrandid argument leads to SQL injection. This issue can be...

SPA Cart CMS 2021 SQL Injection

Document Title: =============== SPA Cart CMS - Multiple SQL Injection Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2304 Release Date: ============= 2021-10-18 Vulnerability Laboratory ID VL-ID: ====================================...