Mcmurtrey Whitaker AND Associates
Mcmurtrey Whitaker AND Associates Cart32: vulnerabilidades y CVE
Mcmurtrey Whitaker AND Associates Cart32 tiene 5 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2007-5253 | Media (5) | 8.9% | — | 6 oct 2007 | c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName parameter in a GetImage action, by appending a NULL byte (%00) sequence followed by an image file… |
| CVE-2004-0675 | Media (6.8) | 4.2% | — | 6 ago 2004 | Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command. |
| CVE-2000-0430 | Media (5) | 5.9% | — | 3 may 2000 | Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request. |
| CVE-2000-0429 | Alta (7.5) | 3.2% | — | 27 abr 2000 | A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands. |
| CVE-2000-0136 | Alta (7.5) | 6.8% | — | 1 feb 2000 | The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. |