GCVE - cpe:2.3:a:nasir_khan:asaancart:0.9:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nasir_khan:asaancart:0.9:*:*:*:*:*:*:*

part: a version: 0.9 update: *

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:sourceforge/asaancart`	purl2cpe	2026-06-01 10:16:49.659648

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-5331`	vulnerable	2026-06-08 05:02:56.220231	Details available Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. (dot dot) in the page parameter to index.php. Published: 2012-10-08T23:00:00.000Z Updated: 2024-08-06T21:05:46.602Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52498 https://exchange.xforce.ibmcloud.com/vulnerabilities/74065 http://www.exploit-db.com/exploits/18599	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5330`	vulnerable	2026-06-08 05:02:56.219841	Details available Multiple cross-site scripting (XSS) vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to calc.php, (2) chat.php, (3) register.php, or (4) index.php in libs/smarty_ajax/; or the (5) page parameter to libs/smarty_ajax/index.php. Published: 2012-10-08T23:00:00.000Z Updated: 2024-08-06T21:05:46.582Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52498 https://exchange.xforce.ibmcloud.com/vulnerabilities/74063 http://www.exploit-db.com/exploits/18599 https://exchange.xforce.ibmcloud.com/vulnerabilities/74064	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.