Lucene search
+L

572 matches found

OpenVAS
OpenVAS
•added 2010/12/02 12:00 a.m.•42 views

Fedora Update for udunits2 FEDORA-2010-17807

Check for the Version of udunits2 OpenVAS Vulnerability Test Fedora Update for udunits2 FEDORA-2010-17807 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

5CVSS6.6AI score0.27924EPSS
SaveExploits1References2
Prion
Prion
•added 2009/08/28 3:30 p.m.•28 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 quantity or 2 Add Engraving fields to the default URI; 3 Quantity field to phpcart.php; 4 Name, 5 Company, 6 Address, 7 City, and 8...

4.3CVSS6.1AI score0.01022EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2009/08/28 3:00 p.m.•37 views

CVE-2008-7108

Multiple cross-site scripting XSS vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 quantity or 2 Add Engraving fields to the default URI; 3 Quantity field to phpcart.php; 4 Name, 5 Company, 6 Address, 7 City, and 8...

5.8AI score0.01022EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2007/10/11 10:17 a.m.•14 views

CVE-2007-5372

Multiple SQL injection vulnerabilities in a LedgerSMB 1.0.0 through 1.2.7 and b DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via 1 the invoice quantity field or 2 the sort field...

8.8AI score0.02407EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/11 12:00 a.m.•10 views

CVE-2007-5372: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in a LedgerSMB 1.0.0 through 1.2.7 and b DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via 1 the invoice quantity field or 2 the sort field...

10CVSS6.4AI score0.02407EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/05/09 12:00 a.m.•9 views

CVE-2007-2549: Undefined Security Weakness

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 c or 2 quantity parameter...

7.5CVSS6.4AI score0.01195EPSS
SaveExploits2References1
NVD
NVD
•added 2006/12/11 6:28 p.m.•24 views

CVE-2006-6464

viewcart in Midicart accepts negative numbers in the Qty quantity field, which allows remote attackers to obtain a smaller total price for a shopping cart...

5CVSS6.6AI score0.01362EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/11 12:00 a.m.•10 views

CVE-2006-6464: Undefined Security Weakness

viewcart in Midicart accepts negative numbers in the Qty quantity field, which allows remote attackers to obtain a smaller total price for a shopping cart...

5CVSS5.9AI score0.01362EPSS
SaveExploits1References1
CVE
CVE
•added 2005/08/19 4:00 a.m.•64 views

CVE-2005-2623

ECW-Shop 6.0.2 is affected. A remote attacker can specify a negative quantity for an item, causing the item price to be subtracted from the cart total, which impacts cart integrity. The NVD entry notes a base score of 5.0 (Medium) with the impact on integrity as PARTIAL and no confidentiality or ...

5CVSS7.1AI score0.01336EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2005/08/19 4:00 a.m.•37 views

CVE-2005-2623

ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost...

6.7AI score0.01336EPSS
SaveExploits0References3
NVD
NVD
•added 2005/08/19 4:00 a.m.•26 views

CVE-2005-2623

ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost...

5CVSS6.7AI score0.01336EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/08/19 12:00 a.m.•8 views

CVE-2005-2623: Undefined Security Weakness

ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost...

5CVSS5.9AI score0.01336EPSS
SaveExploits0References1
Rows per page
Query Builder