Known Vulnerabilities for products from Xt-commerce
Listed below are 7 of the newest known vulnerabilities associated with the vendor "Xt-commerce".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-61165 json | Not Provided | 2026-07-21 | 2026-07-21 | |
| CVE-2026-61164 json | Not Provided | 2026-07-21 | 2026-07-21 | |
| CVE-2026-61163 json | Not Provided | 2026-07-21 | 2026-07-21 | |
| CVE-2026-61162 json | Not Provided | 2026-07-21 | 2026-07-21 | |
| CVE-2026-61161 json | Not Provided | 2026-07-21 | 2026-07-21 | |
| CVE-2026-61160 json | Not Provided | 2026-07-21 | 2026-07-21 | |
| CVE-2026-61159 json | Not Provided | 2026-07-21 | 2026-07-21 | |
| CVE-2026-61158 json | Not Provided | 2026-07-21 | 2026-07-21 | |
| CVE-2026-61157 json | Not Provided | 2026-07-21 | 2026-07-21 | |
| CVE-2026-61156 json | Not Provided | 2026-07-21 | 2026-07-21 | |
| CVE-2020-12101 json | The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored ... | 4.3 - MEDIUM | 2020-04-30 | 2020-05-06 |
| CVE-2011-5011 json | Multiple cross-site request forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1 and possibly earlier allow remote attac... | Not Provided | 2011-12-25 | 2026-04-29 |
| CVE-2010-1359 json | SQL injection vulnerability in bluegate_seo.inc.php in the Direct URL module for xt:Commerce, when magic_quotes_gpc is disabl... | Not Provided | 2010-04-13 | 2026-04-29 |
| CVE-2008-6304 json | SQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magic_quotes_gpc is enabled and the SEO URLs are activate... | Not Provided | 2009-02-26 | 2026-04-23 |
| CVE-2008-6045 json | Session fixation vulnerability in shopping_cart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web se... | Not Provided | 2009-02-03 | 2026-04-23 |
| CVE-2008-6044 json | Cross-site scripting (XSS) vulnerability in advanced_search_result.php in xt:Commerce 3.0.4 and earlier allows remote attacke... | Not Provided | 2009-02-03 | 2026-04-23 |
| CVE-2007-1126 json | Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. (dot do... | Not Provided | 2007-02-27 | 2026-04-23 |
Known software with vulnerabilities from Xt-commerce
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Xt-commerce | Xt | commerce |