Webasyst / Shop-Script
7 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2014-8377 | Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone numbe… | MEDIUM | 4.3 | Oct 21, 2014 |
| CVE-2010-4859 | SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blog_id parameter in a news… | HIGH | 7.5 | Oct 5, 2011 |
| CVE-2010-1464 | Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote attackers to inject arbitrary web script or HTML via the (1) curr… | MEDIUM | 4.3 | Apr 16, 2010 |
| CVE-2010-1463 | Multiple SQL injection vulnerabilities in WebAsyst Shop-Script FREE allow attackers to execute arbitrary SQL commands via the (1) add2cart, (2) c_id, (3) categ… | HIGH | 7.5 | Apr 16, 2010 |
| CVE-2010-1462 | Directory traversal vulnerability in WebAsyst Shop-Script FREE has unknown impact and attack vectors via the sub parameter. | HIGH | 10.0 | Apr 16, 2010 |
| CVE-2007-1855 | Multiple PHP remote file inclusion vulnerabilities in smarty/smarty_class.php in Shop-Script FREE allow remote attackers to execute arbitrary PHP code via a UR… | HIGH | 7.5 | Apr 3, 2007 |
| CVE-2006-5566 | CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting a… | MEDIUM | 5.0 | Oct 27, 2006 |
Showing 1 to 7 of 7 CVEs