GCVE - cpe:2.3:a:dragonfrugal:dfd_cart:1.1.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dragonfrugal:dfd_cart:1.1.6:*:*:*:*:*:*:*

part: a version: 1.1.6 update: *

Vendor	Dragonfrugal (`af3cbc80-69ef-5696-bb49-16c88f7a3ebe`)
Product	Dfd Cart (`ca8fb912-6f57-5a96-aefb-1d9aa03b092e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/taoteh1221/dfd_cart`	purl2cpe	2026-06-01 10:13:43.442313

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-1542`	vulnerable	2026-06-08 04:54:08.969891	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1.198, 1.197, and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks or (2) change unspecified settings. Published: 2010-04-26T19:00:00.000Z Updated: 2024-09-16T16:18:50.219Z Open on db.gcve.eu Reference links http://secunia.com/advisories/38635 http://holisticinfosec.org/content/view/135/45/ http://osvdb.org/62673	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1541`	vulnerable	2026-06-08 04:54:08.964640	Details available Multiple cross-site scripting (XSS) vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) category and (2) list_quantity parameters to index.php, and the (3) category parameter to your.order.php. Published: 2010-04-26T19:00:00.000Z Updated: 2024-09-16T18:34:21.781Z Open on db.gcve.eu Reference links http://secunia.com/advisories/38635 http://holisticinfosec.org/content/view/135/45/ http://www.securityfocus.com/bid/38505 http://osvdb.org/62672 http://osvdb.org/62671	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.