Shop Script
Approved changes feed: RSS · Atom
cpe:2.3:a:webasyst_llc:shop-script:*:*:free:*:*:*:*:*part: a version: * update: *
| Vendor | Webasyst Llc (f219fa78-f486-5950-9e2d-a55de2774d94) |
|---|---|
| Product | Shop Script (b3ca1a4d-4638-531b-ae02-6370d2ba9456) |
| Edition | free |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-1463 |
vulnerable | 2026-06-08 04:54:08.325008 |
Details available
Multiple SQL injection vulnerabilities in WebAsyst Shop-Script FREE allow attackers to execute arbitrary SQL commands via the (1) add2cart, (2) c_id, (3) categoryID, (4) list_price, (5) name, (6) new_offer, (7) price, (8) product_code, (9) productID, (10) rating, and (11) save_product parameters.
Published: 2010-04-16T19:00:00.000Z
Updated: 2024-08-07T01:28:40.694Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1462 |
vulnerable | 2026-06-08 04:54:08.324606 |
Details available
Directory traversal vulnerability in WebAsyst Shop-Script FREE has unknown impact and attack vectors via the sub parameter.
Published: 2010-04-16T19:00:00.000Z
Updated: 2024-08-07T01:28:40.705Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1855 |
vulnerable | 2026-06-08 04:49:43.639069 |
Details available
Multiple PHP remote file inclusion vulnerabilities in smarty/smarty_class.php in Shop-Script FREE allow remote attackers to execute arbitrary PHP code via a URL in the (1) _smarty_compile_path, (2) smarty_compile_path, (3) get_plugin_filepath, (4) smarty_dir, and (5) filename parameters. NOTE: this issue might be related to CVE-2006-7105.
Published: 2007-04-03T16:00:00.000Z
Updated: 2024-08-07T13:13:41.966Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5566 |
vulnerable | 2026-06-08 04:49:20.818394 |
Details available
CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the (1) links_exchange, (2) news, (3) search_with_change_category_ability, (4) logging, (5) feedback, (6) show_price, (7) register, (8) answer, (9) productID, and (10) inside parameters.
Published: 2006-10-27T16:00:00.000Z
Updated: 2024-08-07T19:55:53.470Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.