← Back

Cosmicphp

cosmicphp

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Cosmicshoppingcart
cosmicshoppingcart
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-2650
1Cosmicphp
1Cosmicshoppingcart
Apr 16, 2026
May 30, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max parameter.
CVE-2006-2649
1Cosmicphp
1Cosmicshoppingcart
Apr 16, 2026
May 30, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in (a) search.php, (b) search_cat.php, (c) search_price.php, and (d) product_details.php in the cosmicshop directory for CosmicShoppingCart allow remote attackers to in...Show more
Multiple cross-site scripting (XSS) vulnerabilities in (a) search.php, (b) search_cat.php, (c) search_price.php, and (d) product_details.php in the cosmicshop directory for CosmicShoppingCart allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, as demonstrated by the (1) query parameter in search.php and the (2) data parameter in search_cat.php.Show less