Export limit exceeded: 55519 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2006-5727

PHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote attackers to execute arbitrary PHP code via the (1) _saz[settings][shippingfolder] and (2) _saz[settings][taxfolder] parameters.

CVSS 2.0 · 5.1 Medium EPSS 3.4% KEV · Not listed
Vendors
Sazcart
Products
Sazcart
CVE-2008-2224

Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) _saz[settings][site_dir] parameter to layouts/default/header.saz.php and the (2) _saz[settings][site_url] parameter to admin/alayouts/default/pages/login.php.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Sazcart
Products
Sazcart
CVE-2008-2411

SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a details action.

CVSS 2.0 · 6.8 Medium EPSS 1.1% KEV · Not listed
Vendors
Sazcart
Products
Sazcart