VendorsKartatopiapiluscart1.4.1
Vulnerabilities

Kartatopia PilusCart 1.4.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2019-9769
PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as administrator.
Published 2019-03-14 · Modified
8.81 PoCEPSS 0.023
CVE-2019-25672
PilusCart 1.4.1 SQL Injection via send Parameter
Published 2026-04-05 · Analyzed
8.8EPSS 0.004