Vulnerabilities (CVE)

Filtered by vendor Turnkeywebtools Subscribe
Filtered by product Sunshop Shopping Cart
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-3768 1 Turnkeywebtools 1 Sunshop Shopping Cart 2024-02-04 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in an edit_registry action to index.php, (2) a vector involving the check_email function, and other vectors.
CVE-2008-2339 1 Turnkeywebtools 1 Sunshop Shopping Cart 2024-02-04 7.5 HIGH N/A
SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action, a different vector than CVE-2008-2038, CVE-2007-4597, and CVE-2007-2549.