CVE-2014-3830

Mô tả

Tham khảo

• packetstormsecurity.com/files/127785/TomatoCart-1.x-Cross-Site-Scripting-SQL-Injection.html · Exploit
• breaking.technology/advisories/CVE-2014-3830.txt

Lỗ hổng khác của tomatocart

• CVE-2014-3978TRUNG BÌNH 6.5SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands via the First Name a…
• CVE-2012-5907TRUNG BÌNH 5.0Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary fil…
• CVE-2012-4934THẤP 3.5TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended p…
• CVE-2011-3811TRUNG BÌNH 5.0TomatoCart 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation…