comersus_open_technologies 相关的公开 CVE 漏洞与安全风险信息，提供 CVSS、EPSS、公开时间与漏洞情报数据，帮助评估潜在风险与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2007-3324 | Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter to (1) comersus_customerAuthenticateForm.asp or (2) comersus_message.asp, different vectors than CVE-2004-0681. | [email protected] | 4.3 | 1.84% | 2007-06-21 | 2026-06-16 |
| CVE-2007-3323 | SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL commands via the idProduct parameter. NOTE: this might be the same as CVE-2005-2190.2. | [email protected] | 7.5 | 1.04% | 2007-06-21 | 2026-06-16 |
| CVE-2005-3397 | Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp. NOTE: the comersus_backoffice_message.asp/message vector is already covered by CVE-2005-2191 item 2. | [email protected] | 4.3 | 1.39% | 2005-11-01 | 2026-06-16 |
| CVE-2005-3285 | Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web script or HTML via the (1) forwardTo1, (2) forwardTo2, (3) nameFT1, or (4) nameFT2 parameters. | [email protected] | 4.3 | 1.86% | 2005-10-23 | 2026-06-16 |
| CVE-2005-2191 | Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to comersus_backoffice_listAssignedPricesToCustomer.asp or (2) message parameter to comersus_backoffice_message.asp. | [email protected] | 4.3 | 1.21% | 2005-07-11 | 2026-06-16 |
| CVE-2005-2190 | Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to comersus_optAffiliateRegistrationExec.asp or (2) idProduct parameter to comersus_optReviewReadExec.asp. | [email protected] | 7.5 | 1.14% | 2005-07-11 | 2026-06-16 |
| CVE-2005-1188 | Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter. | [email protected] | 4.3 | 3.62% | 2005-05-02 | 2026-06-16 |
| CVE-2005-1010 | Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username. | [email protected] | 4.3 | 1.18% | 2005-05-02 | 2026-06-16 |
| CVE-2005-0303 | Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter. | [email protected] | 4.3 | 1.16% | 2005-05-02 | 2026-06-16 |
| CVE-2005-0302 | SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header. | [email protected] | 7.5 | 1.33% | 2005-05-02 | 2026-06-16 |
| CVE-2005-0301 | comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program. | [email protected] | 7.5 | 1.64% | 2005-05-02 | 2026-06-16 |
| CVE-2004-1656 | CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter. | [email protected] | 5.0 | 2.28% | 2004-09-01 | 2026-06-16 |
| CVE-2004-0682 | comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL. | [email protected] | 7.5 | 6.85% | 2004-08-06 | 2026-06-16 |
| CVE-2004-0681 | Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Comersus Cart 5.09 allow remote attackers to execute web script as other users via the message parameter. | [email protected] | 6.8 | 2.04% | 2004-08-06 | 2026-06-16 |