Lucene search

K
Comersus Open TechnologiesComersus Cart

9 matches found

CVE
CVE
added 2007/06/21 6:30 p.m.258 views

CVE-2007-3323

SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL commands via the idProduct parameter. NOTE: this might be the same as CVE-2005-2190.2.

7.5CVSS8.2AI score0.0053EPSS
CVE
CVE
added 2005/07/11 4:0 a.m.152 views

CVE-2005-2190

Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to comersus_optAffiliateRegistrationExec.asp or (2) idProduct parameter to comersus_optReviewReadExec.asp.

7.5CVSS8.5AI score0.00431EPSS
CVE
CVE
added 2007/06/21 6:30 p.m.61 views

CVE-2007-3324

Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter to (1) comersus_customerAuthenticateForm.asp or (2) comersus_message.asp, different vectors than CVE-2004-0681.

4.3CVSS5.6AI score0.09207EPSS
CVE
CVE
added 2005/02/20 5:0 a.m.49 views

CVE-2004-1656

CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.

5CVSS7.1AI score0.05832EPSS
CVE
CVE
added 2005/05/02 4:0 a.m.47 views

CVE-2005-1188

Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter.

4.3CVSS5.7AI score0.00834EPSS
CVE
CVE
added 2004/08/06 4:0 a.m.41 views

CVE-2004-0681

Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Comersus Cart 5.09 allow remote attackers to execute web script as other users via the message paramet...

6.8CVSS6AI score0.00726EPSS
CVE
CVE
added 2005/07/11 4:0 a.m.41 views

CVE-2005-2191

Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to comersus_backoffice_listAssignedPricesToCustomer.asp or (2) message parameter to comersus_backoffice_message.asp.

4.3CVSS5.8AI score0.00409EPSS
CVE
CVE
added 2004/08/06 4:0 a.m.39 views

CVE-2004-0682

comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL.

7.5CVSS6.7AI score0.03062EPSS
CVE
CVE
added 2005/05/02 4:0 a.m.33 views

CVE-2005-1010

Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username.

4.3CVSS5.7AI score0.00346EPSS