Vendor/product archive

dragonfrugal / dfd_cart CVEs

Beta · best-effort

4 CVEs tagged to dragonfrugal / dfd_cart — 0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to dragonfrugal vendor archive

CVE-2010-1542

Published Apr 26, 2010

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1.198, 1.197, and earlier allow remote attackers to hijack the authentication of admi…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-1541

Published Apr 26, 2010

Multiple cross-site scripting (XSS) vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) category and (2…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-5136

Published Sep 28, 2007

Cross-site scripting (XSS) vulnerability in DFD Cart 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-5098

Published Sep 26, 2007

Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1