Turnkeywebtools Sunshop Shopping Cart vulnerabilities
2 known vulnerabilities affecting turnkeywebtools/sunshop_shopping_cart.
Total CVEs
2
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
HIGH2
Vulnerabilities
Page 1 of 1
CVE-2008-3768P3HIGHCVSS 7.5PoC≤ 4.1.4v4.0.0+13 more2008-08-22
CVE-2008-3768 [HIGH] CWE-89 CVE-2008-3768: Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart
Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in an edit_registry action to index.php, (2) a vector involving the check_email function, and other vectors.
nvd
CVE-2008-2339P3HIGHCVSS 7.5PoCv3.5.12008-05-19
CVE-2008-2339 [HIGH] CVE-2008-2339: SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows rem
SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action, a different vector than CVE-2008-2038, CVE-2007-4597, and CVE-2007-2549.
nvd