← Back

Naxtor

naxtor

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Shopping Cart
shopping_cart
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2005-2477
1Naxtor
1Shopping Cart
Apr 16, 2026
Aug 5, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
shop_display_products.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive information via a cat_id with a "'" (single quote), which reveals the path in an error message, possibly due to an SQL inj...Show more
shop_display_products.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive information via a cat_id with a "'" (single quote), which reveals the path in an error message, possibly due to an SQL injection vulnerability.Show less
CVE-2005-2476
1Naxtor
1Shopping Cart
Apr 16, 2026
Aug 5, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in lost_passowrd.php in Naxtor Shopping Cart 1.0 allows remote attackers to inject arbitrary web script or HTML via the email parameter.