GCVE - cpe:2.3:a:cpcommerce:cpcommerce:1.0.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cpcommerce:cpcommerce:1.0.5:*:*:*:*:*:*:*

part: a version: 1.0.5 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-4637`	vulnerable	2026-06-08 04:50:47.454475	Details available Cross-site scripting (XSS) vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature. NOTE: this is probably a variant of CVE-2008-4121. Published: 2008-10-21T16:00:00.000Z Updated: 2024-08-07T10:24:20.581Z Open on db.gcve.eu Reference links http://cpcommerce.cpradio.org/ https://exchange.xforce.ibmcloud.com/vulnerabilities/46090	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4121`	vulnerable	2026-06-08 04:50:37.911477	Details available Multiple cross-site scripting (XSS) vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in a search.quick action to search.php and (2) the name parameter in a sendtofriend action to sendtofriend.php. Published: 2008-10-21T16:00:00.000Z Updated: 2024-08-07T10:08:33.628Z Open on db.gcve.eu Reference links http://cpcommerce.cpradio.org/ http://www.securitytracker.com/id?1021070 http://www.securityfocus.com/archive/1/497545/100/0/threaded http://www.securityfocus.com/bid/31825 http://secunia.com/advisories/32353	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.