CVE-2007-3448

CVE-2007-3448 describes a cross-site scripting vulnerability in BugMall Shopping Cart 2.5 and earlier. An attacker can inject arbitrary script via the msgs parameter in index.php. The NVD entry notes this affects 2.5 and earlier versions; 4.0.2 and other versions might also be affected. The CVSS ...

CVE-2007-3446

The vulnerability CVE-2007-3446 affects BugMall Shopping Cart 2.5 and earlier. The issue is the default credentials: username “demo” and password “demo,” which allow remote attackers to obtain login access. This constitutes an authentication issue that can enable unauthorized access to the applic...

CVE-2007-3447

CVE-2007-3447 : SQL injection in BugMall Shopping Cart ≤2.5 (and possibly 4.0.2+) via the basic search box, enabling remote execution of arbitrary SQL. Root cause: unsafe SQL in the search functionality. No remediation details are provided in the connected documents.