C97 Cart Engine
3 CVEs affecting C97 Cart Engine. Latest disclosed: 2014-10-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-8307 | | 2014-10-16 | Multiple cross-site scripting (XSS) vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary we… | |
CVE-2014-8306 | | 2014-10-16 | SQL injection vulnerability in the sql_query function in cart.php in C97net Cart Engine before 4.0 allows remote attackers to execute arbitrary SQL commands vi… | |
CVE-2014-8305 | | 2014-10-16 | Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remote attackers to redirect users to arbitr… |