Approved changes feed: RSS · Atom

cpe:2.3:a:cosmicphp:cosmicshoppingcart:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCosmicphp (806b7212-342d-5972-a5b8-5a27c9a60406)
ProductCosmicshoppingcart (d8a34c90-804a-5e7e-ba8e-e8930dccac42)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2650 vulnerable 2026-06-08 04:49:07.223877 Details available
SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max parameter.
Published: 2006-05-30T10:00:00.000Z
Updated: 2024-08-07T17:58:51.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2649 vulnerable 2026-06-08 04:49:07.223464 Details available
Multiple cross-site scripting (XSS) vulnerabilities in (a) search.php, (b) search_cat.php, (c) search_price.php, and (d) product_details.php in the cosmicshop directory for CosmicShoppingCart allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, as demonstrated by the (1) query parameter in search.php and the (2) data parameter in search_cat.php.
Published: 2006-05-30T10:00:00.000Z
Updated: 2024-08-07T17:58:51.932Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.