Code injection

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cartname parameter...

CVE-2008-6758

Cross-site request forgery CSRF vulnerability in cartsave.php in ViArt Shop aka Shopping Cart 3.5 allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting XSS attacks via the cartname parameter in a save action...