CVE-2008-6758
Viart Shop - CSRF
Title source: ruleDescription
Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting (XSS) attacks via the cart_name parameter in a save action.
Exploits (1)
References (6)
Scores
EPSS
0.0016
EPSS Percentile
36.9%
Details
CWE
CWE-352
Status
published
Products (1)
viart/viart_shop
3.5
Published
Apr 28, 2009
Tracked Since
Feb 18, 2026