CVE-2022-27168

Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

EUVD-2020-29848

Malware in sbrugna...

EUVD-2014-7060

Malware in sbrugna...

EUVD-2018-2896

Malware in sbrugna...

EUVD-2020-29847

Malware in sbrugna...

EUVD-2018-4234

Malware in sbrugna...

EUVD-2022-31704

Malicious code in bioql PyPI...

CVE-2020-9017

LiteCart through 2.2.1 allows CSV injection via a customer's profile...

CVE-2020-9018

LiteCart through 2.2.1 allows admin/?app=users=edituser CSRF to add a user...

CVE-2022-27168

Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-27168

Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-27168

Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-27168

CVE-2022-27168 is a cross-site scripting vulnerability in LiteCart, affecting versions prior to 2.4.2. The vulnerability allows a remote attacker to inject arbitrary script into a victim’s browser via unspecified vectors. Concrete details in the provided documents identify LiteCart as the affecte...

CVE-2022-27168

Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

LiteCart vulnerable to cross-site scripting

Overview LiteCart contains a cross-site scripting vulnerability CWE-79. Satoshi Horikoshi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may be executed on the web browser of the user wh...

LiteCart 跨站脚本漏洞

LiteCart is a suite of e-commerce platforms by the individual developer T. Almroth. LiteCart suffers from a cross-site scripting vulnerability that stems from an attempt to fully cleanse user-supplied data. A remote attacker could use this vulnerability to trick a victim into following a speciall...

JVN#32625020: LiteCart vulnerable to cross-site scripting

LiteCart contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is accessing the web site using the product. Solution Update the software Update the software to the latest version according to the information provided by...

LiteCart CSV Injection Vulnerability

LiteCart is a lightweight e-commerce platform for online merchants developed using PHP, HTML 5 and CSS 3. A CSV injection vulnerability exists in LiteCart 2.2.1 and earlier versions. An attacker can exploit the vulnerability to execute code via a customer's profile...

LiteCart Cross-Site Request Forgery Vulnerability

LiteCart is a lightweight e-commerce platform for online merchants developed using PHP, HTML 5 and CSS 3. A cross-site request forgery vulnerability exists in LiteCart 2.2.1 and earlier versions in admin/?app=users&doc=edituser. An attacker can exploit this vulnerability to add users...