Known Vulnerabilities for products from Qualiteam
Listed below are 15 of the newest known vulnerabilities associated with the vendor "Qualiteam".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2019-7220 json | X-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter. | 6.1 - MEDIUM | 2019-06-06 | 2020-06-29 |
| CVE-2017-15285 json | X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote Code Execution. This vulnerability exists because the app... | 8.8 - HIGH | 2017-10-12 | 2017-11-03 |
| CVE-2015-5455 json | Cross-site scripting (XSS) vulnerability in X-Cart 4.5.0 and earlier allows remote attackers to inject arbitrary web script o... | Not Provided | 2015-07-08 | 2026-05-06 |
| CVE-2015-1178 json | Multiple cross-site scripting (XSS) vulnerabilities in cart.php in X-Cart 5.1.8 and earlier allow remote attackers to inject ... | Not Provided | 2015-01-26 | 2026-05-06 |
| CVE-2015-0951 json | X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified (1... | Not Provided | 2015-04-05 | 2026-05-06 |
| CVE-2015-0950 json | Cross-site scripting (XSS) vulnerability in admin.php in X-Cart 5.1.6 through 5.1.10 allows remote attackers to inject arbitr... | Not Provided | 2015-04-05 | 2026-05-06 |
| CVE-2012-2570 json | Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary w... | Not Provided | 2012-08-15 | 2026-04-29 |
| CVE-2007-4907 json | Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a URL i... | Not Provided | 2007-09-17 | 2026-04-23 |
| CVE-2006-4904 json | Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwr... | 7.5 - HIGH | 2006-09-21 | 2017-07-20 |
| CVE-2006-2827 json | ** DISPUTED ** SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remo... | 6.4 - MEDIUM | 2006-06-05 | 2023-11-07 |
| CVE-2005-1823 json | Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web ... | Not Provided | 2005-06-01 | 2025-04-03 |
| CVE-2005-1822 json | Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via... | Not Provided | 2005-06-01 | 2025-04-03 |
| CVE-2004-0242 json | X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perli... | Not Provided | 2004-11-23 | 2025-04-03 |
| CVE-2004-0241 json | X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) gen... | Not Provided | 2004-11-23 | 2025-04-03 |
| CVE-2004-0240 json | Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in the s... | Not Provided | 2004-11-23 | 2025-04-03 |
Known software with vulnerabilities from Qualiteam
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Qualiteam | X-cart | 3.2.0 |