CVE-2007-3448

CVE-2007-3448 describes a cross-site scripting vulnerability in BugMall Shopping Cart 2.5 and earlier. An attacker can inject arbitrary script via the msgs parameter in index.php. The NVD entry notes this affects 2.5 and earlier versions; 4.0.2 and other versions might also be affected. The CVSS ...

CVE-2007-3447

CVE-2007-3447 : SQL injection in BugMall Shopping Cart ≤2.5 (and possibly 4.0.2+) via the basic search box, enabling remote execution of arbitrary SQL. Root cause: unsafe SQL in the search functionality. No remediation details are provided in the connected documents.