Skip to content
OpenAdvisories

Vendor

SPA-Cart

3 known vulnerabilities.

Products

eCommerce CMS 2 SPA-CART CMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2023-4548 Public exploit EPSS 29%

    SPA-Cart eCommerce CMS GET Parameter search sql injection

    A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3. The impacted element is an unknown function of the file /search of the component GET Parameter Handler. Such manipulation of the argument filter[brandid] leads to sql injection. The attack may …

    SPA-Cart eCommerce CMS