Skip to content
Noroxi

qualiteam records

15 published records for vendor qualiteam.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

15 records
  • CVE-2004-0241
    42Plan

    X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.

    CriticalCVSS 10.0Proof of conceptEPSS 6%

    qualiteam · x-cartNov 23, 2004

  • CVE-2006-2827
    39Monitor

    SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitra

    CriticalCVSS 9.8No exploitEPSS 1%

    qualiteam · x-cartJun 5, 2006

  • CVE-2017-15285
    36Monitor

    X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote Code Execution.

    HighCVSS 8.8No exploitEPSS 2%

    qualiteam · x-cartOct 12, 2017

  • CVE-2007-4907
    32Monitor

    Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a URL in the xcart_dir

    HighCVSS 7.5Proof of conceptEPSS 8%

    qualiteam · x-cartSep 17, 2007

  • CVE-2006-4904
    32Monitor

    Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary p

    HighCVSS 7.5Proof of conceptEPSS 7%

    qualiteam · x-cartSep 20, 2006

  • CVE-2005-1822
    31Monitor

    Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the (1) cat or

    HighCVSS 7.5Proof of conceptEPSS 2%

    qualiteam · x-cartJun 1, 2005

  • CVE-2015-0951
    26Monitor

    X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified (1) update or (2)

    MediumCVSS 6.5No exploitEPSS 1%

    qualiteam · x-cartApr 4, 2015

  • CVE-2019-7220
    24Monitor

    X-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter.

    MediumCVSS 6.1No exploitEPSS 0%

    qualiteam · x-cartJun 6, 2019

  • CVE-2004-0242
    22Monitor

    X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command.

    MediumCVSS 5.0Proof of conceptEPSS 6%

    qualiteam · x-cartNov 23, 2004

  • CVE-2004-0240
    20Monitor

    Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a ..

    MediumCVSS 5.0No exploitEPSS 1%

    qualiteam · x-cartNov 23, 2004

  • CVE-2005-1823
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML

    MediumCVSS 4.3Proof of conceptEPSS 3%

    qualiteam · x-cartJun 1, 2005

  • CVE-2015-1178
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in cart.php in X-Cart 5.1.8 and earlier allow remote attackers to inject arbitrary web s

    MediumCVSS 4.3No exploitEPSS 1%

    qualiteam · x-cartJan 26, 2015

  • CVE-2012-2570
    17Monitor

    Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HT

    MediumCVSS 4.3Proof of conceptEPSS 1%

    qualiteam · x-cartAug 15, 2012

  • CVE-2015-5455
    17Monitor

    Cross-site scripting (XSS) vulnerability in X-Cart 4.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unsp

    MediumCVSS 4.3No exploitEPSS 1%

    qualiteam · x-cartJul 8, 2015

  • CVE-2015-0950
    17Monitor

    Cross-site scripting (XSS) vulnerability in admin.php in X-Cart 5.1.6 through 5.1.10 allows remote attackers to inject arbitrary web script

    MediumCVSS 4.3No exploitEPSS 1%

    qualiteam · x-cartApr 4, 2015