VYPR

Shopping Cart

by Dansie

CVEs (2)

  • CVE-2003-1517Dec 31, 2003
    risk 0.03cvss epss 0.05

    cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, which leaks the path in an error message.

  • CVE-2000-1243Dec 31, 2000
    risk 0.00cvss epss 0.00

    Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the product developers.