Browse CVEs

MEDIUM 6.1 CVE-2019-7220 X-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter. X Cart after 5.4.0.3 Fix from $1,6002019-06-06 HIGH 8.8 CVE-2017-15285 X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote Code Execution. This vulnerability exists because the application fails to check … X Cart No fix yet Fix from $1,9502017-10-12 MEDIUM 6.5 CVE-2015-0951 X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified (1) update or (2) remove r… X Cart after 5.1.10 Fix from $1,6002015-04-05 HIGH 7.5 CVE-2007-4907EPSS 8% Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a URL in the xcart_dir paramete… X Cart No fix yet Fix from $1,9502007-09-17 HIGH 7.5 CVE-2006-4904EPSS 7% Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program va… X Cart after 4.1.3 Fix from $1,9502006-09-21 CRITICAL 9.8 CVE-2006-2827 SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitrary SQL co… X Cart Mitigation only Fix from $2,3002006-06-05 HIGH 7.5 CVE-2005-1822 Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) prin… X Cart Mitigation only Fix from $1,9502005-06-01 HIGH 10.0 CVE-2004-0241EPSS 6% X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php. X Cart Patch available Fix from $1,9502004-11-23 MEDIUM 5.0 CVE-2004-0240 Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in the shop_closed_file argument… X Cart Mitigation only Fix from $1,6002004-11-23 MEDIUM 5.0 CVE-2004-0242EPSS 7% X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command. X Cart Patch available Fix from $1,6002004-11-23