CVE-2004-0675: Mcmurtrey Whitaker And Associates CART32

Medium severity, CVSS 6.8. EPSS: 4.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command.

Affected products

• Mcmurtrey Whitaker And Associates CART32: version 2.5a only; version 2.6 only; version 3.0 only; version 3.1 only; version 3.5 only; version 3.5_build619 only; …

Published 2004-08-06. Last modified 2026-06-16.