Comersus Open Technologies

14 CVEs in 3 Comersus Open Technologies products, including Comersus Cart, Comersus Backoffice Lite, Comersus Backoffice Plus.

Comersus Open Technologies products with known CVEs

ProductCVEs
Comersus Cart9
Comersus Backoffice Lite4
Comersus Backoffice Plus2
Comersus Open Technologies CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2007-33242007-06-21Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via the redirectUrl par…
CVE-2007-33232007-06-21SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL commands via the idPr…
CVE-2005-33972005-11-01Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comer…
CVE-2005-32852005-10-23Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web…
CVE-2005-21912005-07-11Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the (1) name pa…
CVE-2005-21902005-07-11Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to comers…
CVE-2005-11882005-05-02Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2005-10102005-05-02Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username.
CVE-2005-03032005-05-02Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and…
CVE-2005-03022005-05-02SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in t…
CVE-2005-03012005-05-02comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to…
CVE-2004-16562004-09-01CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML conten…
CVE-2004-06822004-08-06comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly m…
CVE-2004-06812004-08-06Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportErro…