Skip to content
OpenAdvisories

Archive

16 October 2014

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2014-8306 Public exploit

    SQL injection vulnerability in the sql_query function in cart.php in C97net Cart Engine before 4.0 allows remote attack…

  • Unscored —
    CVE-2014-8307 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow…

  • Unscored —
    CVE-2014-8305 Public exploit

    Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remo…

  • Unscored —
    CVE-2014-3704 Public exploit Scanner template EPSS 100%

    The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct…