C97 Cart Engine vulnerabilities

• c97 cart engine Multiple cross-site scripting (XSS) vulnerabilities in skins/default/outline.tpl in C97net Cart... CVE-2014-8307 Public exploit 4.3 MediumOctober 16, 2014
• c97 cart engine SQL injection vulnerability in the sql_query function in cart.php in C97net Cart Engine before 4... CVE-2014-8306 Public exploit 7.5 HighOctober 16, 2014
• c97 cart engine Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine... CVE-2014-8305 Public exploit 6.4 MediumOctober 16, 2014