Craig Dansie
Craig Dansie Dansie Shopping Cart: vulnerabilidades y CVE
Craig Dansie Dansie Shopping Cart tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2005-2217 | Media (5) | 1.3% | — | 12 jul 2005 | Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow remote attackers to obtain sensitive information such as program variables. |
| CVE-2000-0254 | Media (5) | 6.0% | — | 14 abr 2000 | The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables. |
| CVE-2000-0252 | Media (5) | 2.2% | — | 11 abr 2000 | The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable. |
| CVE-2000-0253 | Alta (10) | 2.5% | — | 11 abr 2000 | The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields. |