Vulnerabilities > MHD Zaher Ghaibeh
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2010-02-26 | CVE-2010-0725 | Cross-Site Scripting vulnerability in MHD Zaher Ghaibeh Arab Cart 1.0.2.0 Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. | 4.3 |
| 2010-02-26 | CVE-2010-0724 | SQL Injection vulnerability in MHD Zaher Ghaibeh Arab Cart 1.0.2.0 SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | 7.5 |