← Back

Afcommerce Shopping Cart

afcommerce_shopping_cart

Vendor: Amazing Flash Commerce • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-3800
1Amazing Flash Commerce
1Afcommerce Shopping Cart
Apr 16, 2026
Jul 24, 2006
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the "new review" text box.
CVE-2006-3794
1Amazing Flash Commerce
1Afcommerce Shopping Cart
Apr 16, 2026
Jul 24, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the search field. NOTE: the vendor has disputed this issue, stating "if someone were to...Show more
SQL injection vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the search field. NOTE: the vendor has disputed this issue, stating "if someone were to type in any sql injection code, that code would never be queried.Show less