CVE-2026-110127

The waynboot-mall software, versions through 2.0.0 , contains an Insecure Direct Object Reference (IDOR) vulnerability within the mobile CartController . The root cause allows authenticated members to access and manipulate other users' data by enumerating sequential cart IDs. Specifically, attack...

PT-2005-2483 · Fishcart · Fishcart

Name of the Vulnerable Software and Affected Versions: FishCart version 3.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the cartid parameter to 'upstnt.php' or the psku parameter to 'display.php'. The vendor disputes this report,...

CVE-2005-1487: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the 1 cartid parameter to upstnt.php or 2 psku parameter to display.php. NOTE: the vendor disputes this report, saying that they are forced SQL errors. The original researcher is...