Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2004-0675
Disclosure Date: August 06, 2004 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command.
0
Attacker Value
Unknown
CVE-2000-0430
Disclosure Date: May 03, 2000 (last updated February 22, 2025)
Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.
0
Attacker Value
Unknown
CVE-2000-0429
Disclosure Date: April 27, 2000 (last updated February 22, 2025)
A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.
0