Asaancart

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-5331 MEDIUM POC This Month

Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP Path Traversal Asaancart

NVD Exploit-DB

CVSS 2.0

6.8

EPSS

5.8%

CVE-2012-5330 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to calc.php, (2) chat.php, (3) register.php,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Asaancart

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

0.6%

CVE-2012-5331

EPSS 6% CVSS 6.8

MEDIUM POC This Month

PHP Path Traversal Asaancart

NVD Exploit-DB

CVE-2012-5330

EPSS 1% CVSS 4.3

MEDIUM POC This Month

PHP XSS Asaancart

NVD Exploit-DB