← Back

Shopping Cart

shopping_cart

Vendor: Naxtor • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2005-2477
1Naxtor
1Shopping Cart
Apr 16, 2026
Aug 5, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
shop_display_products.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive information via a cat_id with a "'" (single quote), which reveals the path in an error message, possibly due to an SQL inj...Show more
shop_display_products.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive information via a cat_id with a "'" (single quote), which reveals the path in an error message, possibly due to an SQL injection vulnerability.Show less
CVE-2005-2476
1Naxtor
1Shopping Cart
Apr 16, 2026
Aug 5, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in lost_passowrd.php in Naxtor Shopping Cart 1.0 allows remote attackers to inject arbitrary web script or HTML via the email parameter.