11 exploited vulnerabilities in X-Cart

Vulnerabilities with publicly known exploits

Vendors: X Cart, Qualiteam
With known exploits: 11
Affected Qualiteam X-cart versions: = 3.2.0, 3.2.1, 3.3.0, 3.3.2, 3.4.0, 3.4.3, 3.4.11, 3.5.0, 4.1.3, 4.0.8, 4.5, 5.1.8
Affected Qtmsoft X-cart versions: All versions

CVE-2004-0241 2 exploits

CVSS 10.0 HIGH 2004-03-18FIX AVAILABLE

Qualiteam X-Cart 3.x - 'general.php?perl_binary' Arbitrary Command Execution Qualiteam X-Cart 3.x - 'upgrade.php?perl_binary' Arbitrary Command Execution

CVSS 8.8 HIGH 2017-10-12FIX AVAILABLE

CVE-2007-4907 1 exploit

CVSS 7.5 HIGH 2007-09-17

X-Cart - Multiple Remote File Inclusions

CVE-2006-4904 3 exploits

CVSS 7.5 HIGH 2006-09-21

X-Cart < 4.1.3 - Arbitrary Variable Overwrite Vulnerability X-Cart 4.1.3 - Arbitrary Variable Overwrite

CVE-2005-1822 8 exploits

CVSS 7.5 HIGH 2005-06-01FIX AVAILABLE

Qualiteam X-Cart 4.0.8 - 'home.php' Multiple SQL Injections Qualiteam X-Cart 4.0.8 - 'product.php' Multiple SQL Injections

CVSS 6.1 MEDIUM 2019-06-06

CVE-2004-0242 1 exploit

CVSS 5.0 MEDIUM 2004-03-18FIX AVAILABLE

Qualiteam X-Cart 3.x - Multiple Remote Information Disclosure Vulnerabilities

CVSS 4.3 MEDIUM 2015-07-08FIX AVAILABLE

CVE-2015-1178 1 exploit

CVSS 4.3 MEDIUM 2015-01-26

X-CART e-Commerce 5.1.8 Cross Site Scripting

CVE-2009-3592 1 exploit

CVSS 4.3 MEDIUM 2009-10-08

X-Cart Email Subscription - 'email' Cross-Site Scripting

CVE-2005-1823 8 exploits

CVSS 4.3 MEDIUM 2005-06-01FIX AVAILABLE

Qualiteam X-Cart 4.0.8 - 'home.php' Multiple Cross-Site Scripting Vulnerabilities Qualiteam X-Cart 4.0.8 - 'product.php' Multiple Cross-Site Scripting Vulnerabilities