C97

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 6
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2014-125138

    C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image Fields

    Last Modified: Nov 02, 2026
    Published: Oct 28, 2026

    CVE-2014-125137

    C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Local File Inclusion via admin/task.php

    Last Modified: Oct 28, 2026
    Published: Oct 28, 2026

    CVE-2014-125136

    C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backup

    Last Modified: Oct 28, 2026
    Published: Oct 28, 2026

    CVE-2014-8305

    Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header to (1) index.php, (2) cart.php, (3) msg.php, or (4) page.php.

    Last Modified: Apr 12, 2025
    Published: Oct 16, 2014

    CVE-2014-8306

    SQL injection vulnerability in the sql_query function in cart.php in C97net Cart Engine before 4.0 allows remote attackers to execute arbitrary SQL commands via the item_id variable, as demonstrated by the (1) item_id[0] or (2) item_id[] parameter.

    Last Modified: Apr 12, 2025
    Published: Oct 16, 2014
    Items Per Page
    C97 Vulnerabilities & Security CVEs | CVE-DB