Login Request a demo
CC
Product
Comersus Cart
by Comersus Open Technologies · last CVE Jun 21, 2007
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities9Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Comersus Cart to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2007-3323
–
1%
Jun 21
SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL commands via the idProduct parameter
Affected: 7.07
CVE-2007-3324
–
2%
Jun 21
Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter to (1)…
Affected: 7.07
CVE-2005-2191
–
1%
Jul 11
Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to…
Affected: All versions, or not specified
CVE-2005-2190
–
1%
Jul 11
Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to…
Affected: All versions, or not specified
CVE-2005-1188
–
4%
May 2
Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage…
Affected: 3.90; 4.00; 4.14; 4.20b; 4.23; 4.27; +5 more
CVE-2005-1010
–
1%
May 2
Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username
Affected: 6.0.3
CVE-2004-1656
–
2%
Sep 1
CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server…
Affected: 5.0.991
CVE-2004-0681
–
2%
Aug 6
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4)…
Affected: 5.09
CVE-2004-0682
–
7%
Aug 6
comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the…
Affected: 5.0.9
Showing 9