Interspire Shopping Cart — known CVE vulnerabilities

Every CVE whose affected-product data names Interspire Shopping Cart, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2009-0412 — CVSS 7.5 (high): The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote attackers to bypass…
• CVE-2008-1076 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in search.php in Interspire Shopping Cart 1.x allows remote attackers to inject arbitrary web…