Cfshopkart Cf Shopkart — known CVE vulnerabilities

Every CVE whose affected-product data names Cfshopkart Cf Shopkart, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2008-6320 — CVSS 7.5 (high): SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands via the Category…
• CVE-2009-3309 — CVSS 7.5 (high): SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL commands via the itemid…
• CVE-2008-6321 — CVSS 5.0 (medium): CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attackers to obtain…