Comersus Open Technologies

14 CVEs across 3 Comersus Open Technologies products. Browse Comersus Open Technologies vulnerabilities, severities, and proof-of-concept exploits.

Comersus Open Technologies products with known CVEs

ProductCVEs
Comersus Cart9
Comersus Backoffice Lite4
Comersus Backoffice Plus2
Comersus Open Technologies CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2007-33242007-06-21Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via the redirectUrl par…
CVE-2007-33232007-06-21SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL commands via the idPr…
CVE-2005-33972005-11-01Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comer…
CVE-2005-32852005-10-23Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web…
CVE-2005-21912005-07-11Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the (1) name pa…
CVE-2005-21902005-07-11Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to comers…
CVE-2005-11882005-05-02Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2005-10102005-05-02Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username.
CVE-2005-03032005-05-02Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and…
CVE-2005-03022005-05-02SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in t…
CVE-2005-03012005-05-02comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to…
CVE-2004-16562004-09-01CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML conten…
CVE-2004-06822004-08-06comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly m…
CVE-2004-06812004-08-06Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportErro…