Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2008-6758

Published: 28/04/2009 Updated: 11/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Viart

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote malicious users to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting (XSS) attacks via the cart_name parameter in a save action.

Vulnerable Product Search on Vulmon Subscribe to Product

viart viart shop 3.5

Exploits

Exploit DB: Viart shopping cart 3.5 - Multiple Vulnerabilities
=============================================================== !vuln ViArt Shopping Cart v35 is prone to multiple remote vulnerabilities Earlier versions may also be affected =============================================================== =============================================================== !dork Dork: intext:"Free Ecommerce Shoppi ...

References

CWE-352http://www.securitytracker.com/id?1021497http://osvdb.org/53283http://www.securityfocus.com/bid/33043http://osvdb.org/51029http://secunia.com/advisories/33340http://www.securityfocus.com/archive/1/499625/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/7628/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook