GCVE - cpe:2.3:a:pilotcart:pilot_cart:7.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pilotcart:pilot_cart:7.3:*:*:*:*:*:*:*

part: a version: 7.3 update: *

Vendor	Pilotcart (`da153c8b-93ad-5274-ad09-081a4934c613`)
Product	Pilot Cart (`c67d156a-96b2-57a8-ab83-e2d47b217d51`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-4872`	vulnerable	2026-06-08 04:56:31.305404	Details available SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the specific parameter. Published: 2011-10-07T10:00:00.000Z Updated: 2024-08-07T04:02:29.947Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/63217 http://securityreason.com/securityalert/8428 http://packetstormsecurity.org/files/view/95777/aspilotpilotcart-sql.txt http://www.exploit-db.com/exploits/15497	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4632`	vulnerable	2026-06-08 04:56:29.765616	Details available Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the (1) article parameter to kb.asp, (2) specific parameter to cart.asp, (3) countrycode parameter to contact.asp, and the (4) srch parameter to search.asp. NOTE: the article parameter to pilot.asp is already covered by CVE-2008-2688. Published: 2010-12-30T20:00:00.000Z Updated: 2024-09-17T01:01:46.544Z Open on db.gcve.eu Reference links http://secunia.com/advisories/30176 http://packetstormsecurity.org/1011-exploits/aspilotpilotcart-sqlxssinject.txt http://advisories.ariko-security.com/november/audyt_bezpieczenstwa_745.html http://www.exploit-db.com/exploits/15448 http://www.securityfocus.com/bid/44698	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4631`	vulnerable	2026-06-08 04:56:29.765146	Details available Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) countrycode parameter to contact.asp, USERNAME parameter to (2) gateway.asp and (3) cart.asp, and the specific parameter to (4) quote.asp and (5) buyitnow. Published: 2010-12-30T20:00:00.000Z Updated: 2024-08-07T03:51:17.984Z Open on db.gcve.eu Reference links http://secunia.com/advisories/30176 http://packetstormsecurity.org/1011-exploits/aspilotpilotcart-sqlxssinject.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/63053 http://advisories.ariko-security.com/november/audyt_bezpieczenstwa_745.html http://www.exploit-db.com/exploits/15448	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2688`	vulnerable	2026-06-08 04:50:31.592297	Details available SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action. Published: 2008-06-13T18:00:00.000Z Updated: 2024-08-07T09:14:14.338Z Open on db.gcve.eu Reference links http://secunia.com/advisories/30176 https://www.exploit-db.com/exploits/5765 http://www.securityfocus.com/bid/29615 https://exchange.xforce.ibmcloud.com/vulnerabilities/42946	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Pilot Cart

Notes

PURL mappings

Vulnerability references

Contribute