Skip to content
Noroxi

metalinks records

7 published records for vendor metalinks.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    7 records
    • CVE-2005-1363
      30Monitor

      Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via (1) intCatalogID

      HighCVSS 7.5No exploitEPSS 1%

      metalinks · metacart2May 2, 2005

    • CVE-2005-1364
      30Monitor

      Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or

      HighCVSS 7.5No exploitEPSS 1%

      metalinks · metabid auctionsMay 2, 2005

    • CVE-2005-1361
      30Monitor

      Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) intProdID

      HighCVSS 7.5No exploitEPSS 1%

      metalinks · metacart e-shopMay 2, 2005

    • CVE-2005-1362
      30Monitor

      Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the (1) intPr

      HighCVSS 7.5No exploitEPSS 1%

      metalinks · metacart2May 2, 2005

    • CVE-2002-0943
      25Monitor

      MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitiv

      MediumCVSS 6.4No exploitEPSS 1%

      metalinks · metacart2.sqlOct 4, 2002

    • CVE-2008-6051
      20Monitor

      MetaCart Free stores metacart.mdb under the web root with insufficient access control, which allows remote attackers to obtain usernames and

      MediumCVSS 5.0No exploitEPSS 1%

      metalinks · metacartFeb 4, 2009

    • CVE-2005-1622
      17Monitor

      Cross-site scripting (XSS) vulnerability in productsByCategory.asp in MetaCart e-Shop allows remote attackers to inject arbitrary web script

      MediumCVSS 4.3No exploitEPSS 0%

      metalinks · metacart e-shopMay 16, 2005