EUVD-2020-10399

Malware in sbrugna...

EUVD-2020-10400

Malware in sbrugna...

EUVD-2020-10401

Malware in sbrugna...

CVE-2020-18475

Cross Site Scripting XSS vulnerabilty exists in Hucart CMS 5.7.4 is via the mestitle field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed...

CVE-2020-18477

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

CVE-2020-18476

SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usdimage field...

CVE-2020-18477

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

CVE-2020-18476

SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usdimage field...

CVE-2020-18477

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

CVE-2020-18475

Cross Site Scripting XSS vulnerabilty exists in Hucart CMS 5.7.4 is via the mestitle field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed...

CVE-2020-18476

SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usdimage field...

Sql injection

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

Cross site scripting

Cross Site Scripting XSS vulnerabilty exists in Hucart CMS 5.7.4 is via the mestitle field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed...

Sql injection

SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usdimage field...

CVE-2020-18477

CVE-2020-18477 affects HuCartCMS 5.7.4. The vulnerability is an SQL injection in the Message con_content field used during purchase enquiries, enabling potentially unauthorized database access. Multiple connected sources (Red Hat advisory, CNVD CNVD-2021-68441, CNVD/CVELIST entries, and NVD entry...

CVE-2020-18477

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

CVE-2020-18476

HuCartCMS 5.7.4 is affected by a SQL injection vulnerability in the usd_image field (reported as header/avatar usd_image in some sources). The CVE-2020-18476 entry documents a SQLi in HuCartCMS 5.7.4 via this field, with high severity in CVSS 3.1 (8.8) and medium in CVSS 2.0 (6.5). Concrete detai...

CVE-2020-18476

SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usdimage field...

CVE-2020-18475

HuCartCMS 5.7.4 is affected by a Cross-Site Scripting (XSS) vulnerability in the mes_title field of the outbox header. The vulnerability arises from insufficient input sanitization, allowing an attacker to inject a malicious script that executes when other users open the email. Affected component...

CVE-2020-18475

Cross Site Scripting XSS vulnerabilty exists in Hucart CMS 5.7.4 is via the mestitle field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed...