CO
Vendor
Comersus Open Technologies
15
CVEs
0
On KEV
0
New 30D
Products
CC–
Comersus Cart
Comersus Open Technologies
9 CVEs0 on KEV0 new
CB–
Comersus Backoffice Lite
Comersus Open Technologies
4 CVEs0 on KEV0 new
CB–
Comersus Backoffice Plus
Comersus Open Technologies
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2007-3323 | CC Comersus Cart Comersus Open Technologies | – | Jun 21 | SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL commands via the idProduct parameter |
| CVE-2007-3324 | CC Comersus Cart Comersus Open Technologies | – | Jun 21 | Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter to (1)… |
| CVE-2005-3397 | CB Comersus Backoffice Lite Comersus Open Technologies | – | Nov 1 | Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to… |
| CVE-2005-3285 | CB Comersus Backoffice Plus Comersus Open Technologies | – | Oct 23 | Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web script or HTML via… |
| CVE-2005-2190 | CC Comersus Cart Comersus Open Technologies | – | Jul 11 | Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to… |
| CVE-2005-2191 | CC Comersus Cart Comersus Open Technologies | – | Jul 11 | Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to… |
| CVE-2005-1188 | CC Comersus Cart Comersus Open Technologies | – | May 2 | Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage… |
| CVE-2005-0301 | CB Comersus Backoffice Lite Comersus Open Technologies | – | May 2 | comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program |
| CVE-2005-0302 | CB Comersus Backoffice Lite Comersus Open Technologies | – | May 2 | SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header |
| CVE-2005-0303 | CB Comersus Backoffice Lite Comersus Open Technologies | – | May 2 | Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote… |
| CVE-2005-1010 | CC Comersus Cart Comersus Open Technologies | – | May 2 | Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username |
| CVE-2004-1656 | CC Comersus Cart Comersus Open Technologies | – | Sep 1 | CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server… |
| CVE-2004-0681 | CC Comersus Cart Comersus Open Technologies | – | Aug 6 | Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4)… |
| CVE-2004-0682 | CC Comersus Cart Comersus Open Technologies | – | Aug 6 | comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the… |