Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Kryptronic Subscribe
Filtered by product Clickcartpro
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-4293 1 Kryptronic 1 Clickcartpro 2011-03-07 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the affl parameter.
CVE-2002-2310 1 Kryptronic 1 Clickcartpro 2008-09-05 5.0 MEDIUM N/A
ClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient access control on servers other than Apache, which allows remote attackers to obtain usernames and passwords.