Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2004-0241

Disclosure Date: November 23, 2004 (last updated February 22, 2025)
X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.
0
0
Attacker Value
Unknown

CVE-2004-0242

Disclosure Date: November 23, 2004 (last updated February 22, 2025)
X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command.
0
0
Attacker Value
Unknown

CVE-2004-0240

Disclosure Date: November 23, 2004 (last updated February 22, 2025)
Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in the shop_closed_file argument to auth.php.
0
0