Cactusoft

8 CVEs across 3 Cactusoft products. Browse Cactusoft vulnerabilities, severities, and proof-of-concept exploits.

Cactusoft products with known CVEs

ProductCVEs
Cactushop4
Parodia3
Cactushop Lite1
Cactusoft CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2007-30612007-06-06Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database…
CVE-2007-28182007-05-22Cross-site scripting (XSS) vulnerability in cand_login.asp in CactuSoft Parodia 6.4 and earlier allows remote attackers to inject arbitrary web script or HTML…
CVE-2006-59912006-11-21Multiple SQL injection vulnerabilities in wwweb concepts CactuShop allow remote attackers to execute arbitrary SQL commands via the (1) prodtype parameter in p…
CVE-2006-10052006-03-06agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AG_ID param…
CVE-2006-10042006-03-06Cross-site scripting (XSS) vulnerability in agencyprofile.asp in Parodia 6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2004-18822004-12-31Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote attackers to inject arbitrary web script or HTML via the strImag…
CVE-2004-18812004-12-31SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strIte…
CVE-2004-02602004-11-23The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delete arbitrary files via an email address t…