Vulnerabilities (CVE)

Filtered by vendor E-cart Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-1447 1 E-cart 1 Free Shopping Cart 2024-02-28 6.8 MEDIUM N/A
Unrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/.
CVE-2005-1289 1 E-cart 1 E-cart 2024-02-28 7.5 HIGH N/A
index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and possibly (2) cat parameters.