Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
2,047 results · page 41 of 41
Aug 12, 2002dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.CVE-2002-0492 · Other software · Dcscripts · reported by MITREMedium 5
dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.
- Product
- Dcshop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Jul 26, 2002Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal CVE-2002-0439 · Other software · Caupo.net · reported by MITREHigh 7.5
Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.
- Product
- Cauposhop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordiss.netsecurityfocus.com
Jul 3, 2002Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by injecting the script into CVE-2002-0553 · Other software · Turnkey Solutions · reported by MITREHigh 7.5
Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by injecting the script into fields during new customer registration.
- Product
- Sunshop Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comiss.net
Dec 6, 2001The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via anCVE-2001-0821 · Other software · Dcscripts · reported by MITREMedium 5
The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.
- Product
- Dcshop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comdcscripts.com
Sep 15, 2001eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter.CVE-2001-1014 · Other software · Michael Boehme · reported by MITREHigh 7.5
eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter.
- Product
- Webdiscount E Shop Online Shop System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Sep 8, 2001shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter.CVE-2001-0985 · Other software · Hassan Consulting · reported by MITREHigh 7.5
shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter.
- Product
- Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordirata.comsecurityfocus.com
Sep 5, 2001shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter.CVE-2001-0992 · Other software · Kabotie Software Technologies · reported by MITREHigh 7.5
shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter.
- Product
- Shopplus Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comexchange.xforce.ibmcloud.com
Jun 18, 2001Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a ..CVE-2001-0466 · Other software · Microburst · reported by MITREMedium 5
Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
- Product
- Ustorekeeper Online Shopping System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 9, 2001loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of CVE-2000-1092 · Other software · Alex Heiphetz Group · reported by MITREMedium 5
loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename in the "file" parameter.
- Product
- Ezshopper
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Jan 9, 2001Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via a ..CVE-2000-1188 · Other software · I-soft · reported by MITREMedium 5
Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "page" parameter.
- Product
- Quikstore
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Dec 31, 2000Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled bCVE-2000-1243 · Other software · Dansie · reported by MITREMedium 5
Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the product developers.
- Product
- Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Dec 19, 2000Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitraryCVE-2000-0922 · Other software · Bytes Interactive · reported by MITREMedium 5
Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the newpage parameter.
- Product
- Web Shopper
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Dec 19, 2000Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a ..CVE-2000-0921 · Other software · Hassan Consulting · reported by MITREMedium 5
Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
- Product
- Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org
Dec 19, 2000SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.CVE-2000-0926 · Other software · Smartwin Technology · reported by MITREHigh 7.5
SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.
- Product
- Cyberoffice Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.commarc.info
Dec 19, 2000The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows rCVE-2000-0925 · Other software · Smartwin Technology · reported by MITREMedium 5
The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.
- Product
- Cyberoffice Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.commarc.info
Dec 11, 2000add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.CVE-2000-1001 · Other software · Element N.v · reported by MITREHigh 7.5
add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.
- Product
- Element Instantshop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 20, 2000quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET requesCVE-2000-1223 · Other software · I-soft · reported by MITREHigh 7.5
quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request.
- Product
- Quikstore
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordkb.cert.orgkb.cert.org
Jul 10, 2000The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0635 · Other software · Akopia · reported by MITREHigh 7.5
The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters.
- Product
- Minivend
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Jun 20, 2000Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files.CVE-2000-0533 · Other software · SGI · reported by MITREHigh 7.2
Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files.
- Product
- Workshop Debugger And Performance Tools
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsgigate.sgi.comsecurityfocus.com
May 24, 2000The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read sourcCVE-2000-0396 · Other software · Pacific Software · reported by MITREMedium 5
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files.
- Product
- Carello
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
May 1, 2000Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.CVE-2000-0401 · Other software · Pdgsoft · reported by MITREHigh 7.5
Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.
- Product
- PDG Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 14, 2000The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that referenceCVE-2000-0254 · Other software · Craig Dansie · reported by MITREMedium 5
The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.
- Product
- Dansie Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comexchange.xforce.ibmcloud.com
Apr 12, 2000TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a ..CVE-2000-0282 · Other software · Talentsoft · reported by MITREMedium 5
TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.
- Product
- Web+
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.talentsoft.comarchives.neohapsis.com
Apr 11, 2000The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.CVE-2000-0253 · Other software · Craig Dansie · reported by MITREHigh 10
The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.
- Product
- Dansie Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comexchange.xforce.ibmcloud.com
Apr 11, 2000The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.CVE-2000-0252 · Other software · Craig Dansie · reported by MITREMedium 5
The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
- Product
- Dansie Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Feb 27, 2000EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a ..CVE-2000-0187 · Other software · Alex Heiphetz Group · reported by MITREHigh 7.5
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
- Product
- Ezshopper
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Feb 27, 2000EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a ..CVE-2000-0188 · Other software · Alex Heiphetz Group · reported by MITREHigh 7.5
EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
- Product
- Ezshopper
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Feb 21, 2000The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.CVE-2000-0210 · Other software · SUN · reported by MITRELow 1.2
The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.
- Product
- Workshop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Feb 1, 2000The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0103 · Other software · Netsmart · reported by MITREHigh 7.5
The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Smartcart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0102 · Other software · Salescart · reported by MITREHigh 7.5
The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Salescart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0136 · Other software · Mcmurtrey Whitaker And Associates · reported by MITREHigh 7.5
The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Cart32
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0135 · Other software · Atretail · reported by MITREHigh 7.5
The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Atretail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0134 · Other software · Adgrafix Corporation · reported by MITREHigh 7.5
The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Check IT OUT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0123 · Other software · Filemaker · reported by MITREHigh 7.5
The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Filemaker
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0106 · Other software · Easycart · reported by MITREHigh 7.5
The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Easycart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0101 · Other software · Make-a-store · reported by MITREHigh 7.5
The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Orderpage
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0104 · Other software · Web Express · reported by MITREHigh 7.5
The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Shoptron
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0108 · Other software · Intelligent Vending Systems · reported by MITREHigh 7.5
The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Intellivend
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0110 · Other software · Baron Consulting Group · reported by MITREHigh 7.5
The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Websitetool
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0137 · Other software · Cartit · reported by MITREHigh 7.5
The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Cartit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Nov 9, 1999Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop imaCVE-1999-1112 · Other software · Irfanview · reported by MITREHigh 7.5
Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop image header.
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordstud4.tuwien.ac.atsecurityfocus.com
Jul 30, 1999.sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file.CVE-1999-1536 · Other software · Acushop · reported by MITREHigh 7.2
.sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file.
- Product
- Salesbuilder
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 20, 1999quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtCVE-1999-0607 · Other software · I-soft · reported by MITREMedium 5
quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.
- Product
- Quikstore
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 20, 1999An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.CVE-1999-0604 · Other software · Selena SOL · reported by MITREMedium 5
An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.
- Product
- Selena SOL Webstore
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 1, 1999An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information.CVE-1999-0606 · Other software · Seaside Enterprises · reported by MITREMedium 5
An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information.
- Product
- Ezmall
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 1, 1999An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.CVE-1999-0608 · Other software · Pdgsoft · reported by MITREMedium 5
An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.
- Product
- PDG Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 1, 1999An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.CVE-1999-0605 · Other software · Austin Contract Computing · reported by MITREMedium 5
An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.
- Product
- Merchant Order Form
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.