CVE-2021-32172

The e-commerce system Maian Cart (versions 3.0 to 3.8 ) is vulnerable to Remote Code Execution (RCE) due to a broken access control issue in the Elfinder file manager plugin . An unauthenticated attacker can exploit this flaw to execute arbitrary code on the affected system. Publicly available ex...

CVE-2008-1075

The CVE-2008-1075 entry relates to an XSS vulnerability in Maian Cart 1.1, affecting index.php where an attacker can inject arbitrary script via the keywords parameter in a search command. Documents confirm the vulnerability and impact (remote script/HTML injection), but do not provide additional...

CVE-2008-2212

CVE-2008-2212 affects Maian Cart 1.1 with multiple cross-site scripting (XSS) vulnerabilities. The flaws allow remote attackers to inject arbitrary script/HTML via: (1) msg_adminheader, (2) msg_adminheader2, (3) msg_adminheader3, (4) msg_adminheader4 in admin/inc/header.php; (5) msg_script3 and o...