HuCart 5.7.4
Approved changes feed: RSS · Atom
cpe:2.3:a:hucart:hucart:5.7.4:*:*:*:*:*:*:*part: a version: 5.7.4 update: *
| Vendor | Hucart (9cbb2487-b566-50e3-b5c1-2d99aa7f65d6) |
|---|---|
| Product | Hucart (fa1650e2-c648-5199-b66b-7943d7ee3dab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-18477 |
vulnerable | 2026-06-08 05:20:57.008840 |
Details available
SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message con_content field.
Published: 2021-08-26T17:28:52.000Z
Updated: 2024-08-04T14:00:49.170Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18476 |
vulnerable | 2026-06-08 05:20:57.008561 |
Details available
SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usd_image field.
Published: 2021-08-26T17:28:51.000Z
Updated: 2024-08-04T14:00:49.278Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18475 |
vulnerable | 2026-06-08 05:20:57.008169 |
Details available
Cross Site Scripting (XSS) vulnerabilty exists in Hucart CMS 5.7.4 is via the mes_title field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed.
Published: 2021-08-26T17:28:49.000Z
Updated: 2024-08-04T14:00:49.472Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18158 |
vulnerable | 2026-06-08 05:20:56.874330 |
Details available
Cross Site Scripting (XSS) vulnerability in HuCart 5.7.4 via nickname in index.php.
Published: 2021-07-29T16:26:38.000Z
Updated: 2024-08-04T14:00:49.034Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6249 |
vulnerable | 2026-06-08 05:14:10.409505 |
Details available
An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/index.php?load=admins&act=edit_info&act_type=add.
Published: 2019-01-13T15:00:00.000Z
Updated: 2024-08-04T20:16:24.757Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19468 |
vulnerable | 2026-06-08 05:11:15.776948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.