EUVD-2015-1320

Malware in sbrugna...

EUVD-2019-16764

Malware in sbrugna...

EUVD-2017-6742

Malware in sbrugna...

EUVD-2005-1825

Malware in sbrugna...

EUVD-2006-4891

Malware in sbrugna...

EUVD-2004-0240

Malware in sbrugna...

EUVD-2015-5411

Malware in sbrugna...

EUVD-2009-3573

Malware in sbrugna...

EUVD-2015-0959

Malware in sbrugna...

EUVD-2007-4888

Malware in sbrugna...

EUVD-2005-1824

Malware in sbrugna...

EUVD-2004-0241

Malware in sbrugna...

EUVD-2015-0958

Malware in sbrugna...

EUVD-2012-2556

Malware in sbrugna...

CVE-2019-7220

X-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter...

CVE-2015-5455

Cross-site scripting XSS vulnerability in X-Cart 4.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to install/...

X-Cart Concierge Module Information Disclosure

X-Cart Concierge module has been detected on the target X-Cart installation. This may present an attacker with sensitive information to mount further attacks & may leak the admin account email used to log into the store, official company name, license type of the store and other sensitive data No...

X-Cart 5.0.10 < 5.3.6.5 Multiple Vulnerabilities

According to the self-reported version in its response header, the version of X-Cart hosted on the remote web server is 5.0.10 5.3.6.5. It is, therefore, affected by various security issues in the Core, GoSocial, ThemeTweaker & RESTAPI modules. Note that the scanner has not tested for these issue...

X-Cart 5.0.10 < 5.3.3.0 Multiple Vulnerabilities

According to the self-reported version in its response header, the version of X-Cart hosted on the remote web server is 5.0.10 5.3.3.0. It is, therefore, affected by multiples vulnerabilities : - A Remote Code execution vulnerability due to insufficient checking of uploaded content. This...

X-Cart 5.4.1.x < 5.4.1.8 Deserialization Vulnerability

According to the self-reported version in its response header, the version of X-Cart hosted on the remote web server is 5.0.10 5.3.6.8, 5.4.0.x 5.4.0.13 or 5.4.1.x 5.4.1.8. It is, therefore, affected by a vulnerability in the cookie viewedResources handling leading to insecure deserialization and...