CVE-2018-12457

expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header...

EUVD-2022-4201

Malicious code in bioql PyPI...

EUVD-2025-26362

Malicious code in bioql PyPI...

CVE-2025-9797

A vulnerability was determined in mrvautin expressCart up to b31302f4e99c3293bd742c6d076a721e168118b0. This impacts an unknown function of the file /admin/product/edit/ of the component Edit Product Page. This manipulation causes injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-9797

A vulnerability was determined in mrvautin expressCart up to b31302f4e99c3293bd742c6d076a721e168118b0. This impacts an unknown function of the file /admin/product/edit/ of the component Edit Product Page. This manipulation causes injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-9797 mrvautin expressCart Edit Product edit injection

A vulnerability was determined in mrvautin expressCart up to b31302f4e99c3293bd742c6d076a721e168118b0. This impacts an unknown function of the file /admin/product/edit/ of the component Edit Product Page. This manipulation causes injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-9797 mrvautin expressCart Edit Product edit injection

A vulnerability was determined in mrvautin expressCart up to b31302f4e99c3293bd742c6d076a721e168118b0. This impacts an unknown function of the file /admin/product/edit/ of the component Edit Product Page. This manipulation causes injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-9797

The CVE-2025-9797 entry concerns mrvautin expressCart, impacting the Edit Product Page (/admin/product/edit/) where an injection vulnerability is triggered by an issue in an unknown function. Documents indicate the attack can be initialized remotely and that the exploit has been publicly disclose...

expressCart 安全漏洞

expressCart is a shopping cart software by Mark Moffat Individual Developer. A security vulnerability exists in expressCart that stems from an injection attack due to a misuse of the file /admin/product/edit/...

PT-2025-35513

Name of the Vulnerable Software and Affected Versions: expressCart versions prior to b31302f4e99c3293bd742c6d076a721e168118b0 Description: A vulnerability exists in the Edit Product Page component of expressCart. The issue involves an injection flaw within an unknown function of the...

Malicious code in ExpressCart (npm)

The package ExpressCart was found to contain malicious code...

MAL-2025-20095 Malicious code in ExpressCart (npm)

The package ExpressCart was found to contain malicious code...

Unspecified Vulnerability in expressCart

expressCart is a shopping cart module used in Node.js. A security vulnerability exists in expressCart. A remote attacker can exploit this vulnerability to create an admin user...

CVE-2018-12457

expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header...

Design/Logic Flaw

expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header...

CVE-2018-12457

expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header...

CVE-2018-12457

CVE-2018-12457 affects Express-Cart up to version 1.1.6. A remote attacker can create an admin user by exploiting a Referer header to /admin/setup, enabling unauthorized admin account creation. Descriptions across multiple sources confirm the same issue; no explicit exploit details beyond the hea...

CVE-2018-12457

expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header...