Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2008-6945

Disclosure Date: August 12, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mv_order_item CGI variable parameter in Core, (2) the country-select widget, or (3) possibly the value specifier when used in the UserTag feature.
0
0
Attacker Value
Unknown

CVE-2008-2423

Disclosure Date: May 23, 2008 (last updated October 04, 2023)
Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests. NOTE: this might overlap CVE-2007-2635.
0
0
Attacker Value
Unknown

CVE-2008-2424

Disclosure Date: May 23, 2008 (last updated October 04, 2023)
Unspecified vulnerability in the 404 error page for the "Standard demo" in Interchange before 5.6.0 and before 5.5.2 has unknown impact and attack vectors.
0
0
Attacker Value
Unknown

CVE-2007-2635

Disclosure Date: May 13, 2007 (last updated October 04, 2023)
Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests.
0
0