Magicscripts E-store Kit-2 — known CVE vulnerabilities

Every CVE whose affected-product data names Magicscripts E-store Kit-2, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2005-0897 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP…
• CVE-2008-3594 — CVSS 7.5 (high): SQL injection vulnerability in viewdetails.php in MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal Edition, and E-Store…
• CVE-2005-0898 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary…