İçeriğe atla
Noroxi

cs-cart kayıtları

cs-cart üreticisine ait 24 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 21
  3. 24
  4. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

24 kayıt
  • CVE-2023-26686
    39İzleyin

    File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the image upload feature when cust

    KritikCVSS 9,8İstismar yokEPSS %0

    cs-cart · cs-cart multivendor24 Eyl 2024

  • CVE-2023-26689
    39İzleyin

    An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request.

    KritikCVSS 9,8İstismar yokEPSS %0

    cs-cart · cs-cart multivendor24 Eyl 2024

  • CVE-2016-4862
    36İzleyin

    Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9 and earlier allow remote authenticated user

    YüksekCVSS 8,8İstismar yokEPSS %2

    cs-cart · cs-cart20 Nis 2017

  • CVE-2023-26687
    35İzleyin

    Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to obtain sensitive information via the product_data

    YüksekCVSS 8,8İstismar yokEPSS %1

    cs-cart · cs-cart multivendor24 Eyl 2024

  • CVE-2017-2138
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor J

    YüksekCVSS 8,8İstismar yokEPSS %1

    cs-cart · cs-cart2 Ağu 2017

  • CVE-2023-26690
    35İzleyin

    File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via File Manager/Editor component in t

    YüksekCVSS 8,8İstismar yokEPSS %0

    cs-cart · cs-cart multivendor24 Eyl 2024

  • CVE-2025-50850
    34İzleyin

    An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verificati

    YüksekCVSS 8,6İstismar yokEPSS %0

    cs-cart · cs-cart31 Tem 2025

  • CVE-2007-0230
    30İzleyin

    PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in t

    YüksekCVSS 7,5İstismar yokEPSS %1

    cs-cart · cs-cart12 Oca 2007

  • CVE-2008-6394
    30İzleyin

    SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    cs-cart · cs-cart4 Mar 2009

  • CVE-2005-4429
    30İzleyin

    SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort_by and (2) sort_orde

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    cs-cart · cs-cart20 Ara 2005

  • CVE-2009-4891
    30İzleyin

    SQL injection vulnerability in index.php in CS-Cart 2.0.0 Beta 3 allows remote attackers to execute arbitrary SQL commands via the product_i

    YüksekCVSS 7,5İstismar yokEPSS %1

    cs-cart · cs-cart11 Haz 2010

  • CVE-2017-15673
    29İzleyin

    The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors inv

    YüksekCVSS 7,2İstismar yokEPSS %1

    cs-cart · cs-cart28 Kas 2017

  • CVE-2015-2701
    28İzleyin

    Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests

    OrtaCVSS 6,8Kavram kanıtıEPSS %2

    cs-cart · cs-cart25 Mar 2015

  • CVE-2023-26691
    28İzleyin

    Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when inst

    YüksekCVSS 7,2İstismar yokEPSS %1

    cs-cart · cs-cart multivendor24 Eyl 2024

  • CVE-2009-2579
    26İzleyin

    SQL injection vulnerability in reward_points.post.php in the Reward points addon in CS-Cart before 2.0.6 allows remote authenticated users t

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    cs-cart · cs-cart5 Ağu 2009

  • CVE-2025-50847
    26İzleyin

    Cross Site Request Forgery (CSRF) vulnerability in CS Cart 4.18.3, allows attackers to add products to a user's comparison list via a crafte

    OrtaCVSS 6,5İstismar yokEPSS %0

    cs-cart · cs-cart31 Tem 2025

  • CVE-2021-32202
    24İzleyin

    In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation pa

    OrtaCVSS 6,1İstismar yokEPSS %0

    cs-cart · cs-cart14 Eyl 2021

  • CVE-2025-50848
    24İzleyin

    A file upload vulnerability was discovered in CS Cart 4.18.3, allows attackers to execute arbitrary code.

    OrtaCVSS 6,1İstismar yokEPSS %0

    cs-cart · cs-cart31 Tem 2025

  • CVE-2006-2863
    23İzleyin

    PHP remote file inclusion vulnerability in class.cs_phpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via

    OrtaCVSS 5,1Kavram kanıtıEPSS %9

    cs-cart · cs-cart6 Haz 2006

  • CVE-2013-0118
    21İzleyin

    CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value

    OrtaCVSS 5,0İstismar yokEPSS %1

    cs-cart · cs-cart24 Şub 2013

  • CVE-2017-10886
    21İzleyin

    Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Editi

    OrtaCVSS 5,4İstismar yokEPSS %0

    cs-cart · cs-cart17 Kas 2017

  • CVE-2023-26688
    21İzleyin

    Cross Site Scripting (XSS) vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the product_data pa

    OrtaCVSS 5,4İstismar yokEPSS %0

    cs-cart · cs-cart multivendor24 Eyl 2024

  • CVE-2008-1458
    17İzleyin

    Cross-site scripting (XSS) vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via th

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    cs-cart · cs-cart24 Mar 2008

  • CVE-2013-7317
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in CS-Cart before 4.1.1 allow remote attackers to inject arbitrary web script or HTML vi

    OrtaCVSS 4,3İstismar yokEPSS %1

    cs-cart · cs-cart24 Oca 2014