CVE-2009-3215: PHP-Shop-System Ixxo Cart

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter.

Affected products

• PHP-Shop-System Ixxo Cart: any version; up to and including 3.9.6.0

Published 2009-09-16. Last modified 2026-06-16.