Kartatopia Piluscart
3 CVEs affecting Kartatopia Piluscart. Latest disclosed: 2026-04-05. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9769 | High | 8.8 | 2019-03-14 | PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as administrator. |
CVE-2019-25672 | High | 8.2 | 2026-04-05 | PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the '… |
CVE-2019-16123 | High | 7.5 | 2019-09-09 | In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure. |