CVE-2005-1487

FishCart 3.1 contains multiple SQL injection vulnerabilities exploitable through the cartid parameter to upstnt.php or the psku parameter to display.php. The issue is documented across CVE-2005-1487 entries, with vendor disputes over the report (vendor claims forced SQL errors) and notes that the...

CVE-2004-0062

The CVE-2004-0062 entry concerns FishCart prior to 3.1, where an integer overflow in the rnd arithmetic rounding function can be triggered by an order with a large quantity, enabling remote attackers to cause negative totals. Affected software: FishCart (versions before 3.1). Root cause: integer ...

CVE-2005-1486

FishCart 3.1 is affected by multiple vulnerabilities. The primary CVE (CVE-2005-1486) describes cross-site scripting via the following parameters: trackingnum, reqagree, or m in upstracking.php, and nlst in display.php. OpenVAS data also indicates SQL injection vulnerabilities in FishCart that co...