Allpc

allpc

Vendor: Allpcscript • 2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-4947 1Allpcscript 1Allpc Apr 29, 2026 Oct 9, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
CVE-2010-4946 1Allpcscript 1Allpc Apr 29, 2026 Oct 9, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.