CVE-2014-3830

Description

References

• packetstormsecurity.com/files/127785/TomatoCart-1.x-Cross-Site-Scripting-SQL-Injection.html · Exploit
• breaking.technology/advisories/CVE-2014-3830.txt

tomatocart 的其他漏洞

• CVE-2014-3978中危 6.5SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands via the First Name a…
• CVE-2012-5907中危 5.0Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary fil…
• CVE-2012-4934低危 3.5TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended p…
• CVE-2011-3811中危 5.0TomatoCart 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation…