CVE-2020-18477

CVE-2020-18477 affects HuCartCMS 5.7.4. The vulnerability is an SQL injection in the Message con_content field used during purchase enquiries, enabling potentially unauthorized database access. Multiple connected sources (Red Hat advisory, CNVD CNVD-2021-68441, CNVD/CVELIST entries, and NVD entry...

CVE-2020-18476

HuCartCMS 5.7.4 is affected by a SQL injection vulnerability in the usd_image field (reported as header/avatar usd_image in some sources). The CVE-2020-18476 entry documents a SQLi in HuCartCMS 5.7.4 via this field, with high severity in CVSS 3.1 (8.8) and medium in CVSS 2.0 (6.5). Concrete detai...

CVE-2020-18476

SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usdimage field...

CVE-2020-18475

Cross Site Scripting XSS vulnerabilty exists in Hucart CMS 5.7.4 is via the mestitle field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed...