Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2023-33725
Disclosure Date: June 21, 2023 (last updated February 25, 2025)
Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a crafted email address. This is fixed in 6.2.6.1-GA.
0
Attacker Value
Unknown
CVE-2020-21266
Disclosure Date: October 29, 2020 (last updated February 22, 2025)
Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post vulnerability.
0
Attacker Value
Unknown
CVE-2007-5836
Disclosure Date: November 05, 2007 (last updated October 04, 2023)
SQL injection vulnerability in Amazing Flash AFCommerce allows remote attackers to execute arbitrary SQL commands via the firstname parameter to an unspecified component, a different issue than CVE-2006-3794. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
