Skip to content
OpenAdvisories

Product · SPA-Cart

eCommerce CMS

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-4548 Public exploit EPSS 29%

    SPA-Cart eCommerce CMS GET Parameter search sql injection

    A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3. The impacted element is an unknown function of the file /search of the component GET Parameter Handler. Such manipulation of the argument filter[brandid] leads to sql injection. The attack may …

    SPA-Cart eCommerce CMS
  • Low 3.5
    CVE-2023-4547 Public exploit Scanner template EPSS 60%

    SPA-Cart eCommerce CMS search cross site scripting

    A flaw has been found in SPA-Cart eCommerce CMS 1.9.0.3. The affected element is an unknown function of the file /search. This manipulation of the argument filter[brandid]/filter[price] causes cross site scripting. The attack is possible to be carried out rem…

    SPA-Cart eCommerce CMS