Vulnerabilities > CS Cart > CS Cart > 1.2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-08-05 | CVE-2009-2579 | SQL Injection vulnerability in Cs-Cart SQL injection vulnerability in reward_points.post.php in the Reward points addon in CS-Cart before 2.0.6 allows remote authenticated users to execute arbitrary SQL commands via the sort_order parameter in a reward_points.userlog action to index.php, a different vulnerability than CVE-2005-4429.2. | 6.5 |
| 2009-03-04 | CVE-2008-6394 | SQL Injection vulnerability in Cs-Cart SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the cs_cookies[customer_user_id] cookie parameter. | 7.5 |