Every CVE whose affected-product data names Tomatocart, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (5)
CVE-2014-3978 — CVSS 6.5 (medium): SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands via the First Name…
CVE-2011-3811 — CVSS 5.0 (medium): TomatoCart 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the…
CVE-2012-5907 — CVSS 5.0 (medium): Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary…
CVE-2014-3830 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in info.php in TomatoCart 1.1.8.6.1 allows remote attackers to inject arbitrary web script or HTML…
CVE-2012-4934 — CVSS 3.5 (low): TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended…