Icdevgroup

icdevgroup

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Interchange

interchange

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-6945 1Icdevgroup 1Interchange Apr 23, 2026 Aug 12, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mv_order_item CGI vari...Show more Multiple cross-site scripting (XSS) vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mv_order_item CGI variable parameter in Core, (2) the country-select widget, or (3) possibly the value specifier when used in the UserTag feature.Show less
CVE-2008-2424 1Icdevgroup 1Interchange Apr 23, 2026 May 23, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in the 404 error page for the "Standard demo" in Interchange before 5.6.0 and before 5.5.2 has unknown impact and attack vectors.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2008-6945

1Icdevgroup

1Interchange

Apr 23, 2026

Aug 12, 2009

N/A· v4

N/A· v3

4.3 MEDIUM· v2

Multiple cross-site scripting (XSS) vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mv_order_item CGI variable parameter in Core, (2) the country-select widget, or (3) possibly the value specifier when used in the UserTag feature.Show less

CVE-2008-2424

1Icdevgroup

1Interchange

Apr 23, 2026

May 23, 2008

N/A· v4

N/A· v3

10.0 HIGH· v2

Unspecified vulnerability in the 404 error page for the "Standard demo" in Interchange before 5.6.0 and before 5.5.2 has unknown impact and attack vectors.