Cart32 Security Vulnerabilities and Issues — Cart32 CVE List

Lucene search

Mcmurtrey Whitaker And AssociatesCart32

5 matches found

CVE•added 2007/10/06 5:17 p.m.•41 views

CVE-2007-5253

c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName parameter in a GetImage action, by appending a NULL byte (%00) sequence followed by an image file extension, as demonstrated by a request for a ".txt%00.gif" file. NOTE: this might b...

5CVSS6.7AI score0.09676EPSS

CVE•added 2000/02/08 5:0 a.m.•38 views

CVE-2000-0136

The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.

7.5CVSS6.7AI score0.03149EPSS

CVE•added 2000/06/15 4:0 a.m.•36 views

CVE-2000-0429

A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.

7.5CVSS7.6AI score0.05383EPSS

CVE•added 2000/10/13 4:0 a.m.•36 views

CVE-2000-0430

Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.

5CVSS6.8AI score0.03624EPSS

CVE•added 2004/08/06 4:0 a.m.•35 views

CVE-2004-0675

Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command.

6.8CVSS6.2AI score0.04081EPSS