Comersus Open Technologies Comersus Cart — known CVE vulnerabilities
Every CVE whose affected-product data names Comersus Open Technologies Comersus Cart, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (9)
CVE-2005-2190 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the (1) email…
CVE-2004-0682 — CVSS 7.5 (high): comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of…
CVE-2007-3323 — CVSS 7.5 (high): SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL…
CVE-2004-1656 — CVSS 5.0 (medium): CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify…
CVE-2007-3324 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via…
CVE-2005-1010 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account…
CVE-2005-1188 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary…
CVE-2005-2191 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML…