Export limit exceeded: 425860 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2008-6320

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands via the Category parameter in a ViewCategory action.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Cfshopkart
Products
Cf Shopkart
CVE-2008-6321

CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via a direct request.

CVSS 2.0 · 5.0 Medium EPSS 2.2% KEV · Not listed
Vendors
Cfshopkart
Products
Cf Shopkart
CVE-2009-3309

SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a ViewDetails action, a different vector than CVE-2008-6320.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Cfshopkart
Products
Cf Shopkart