EUVD-2006-5942

Malware in sbrugna...

CVE-2006-5959

SQL injection vulnerability in browse.asp in A+ Store E-Commerce allows remote attackers to execute arbitrary SQL commands via the ParentID parameter...

CVE-2006-5960

CVE-2006-5960 concerns XSS vulnerabilities in A+ Store E-Commerce, specifically in account_login.asp. The issue allows remote attackers to inject arbitrary script/HTML via the username (txtUserName) and password (txtPassword) parameters. The vulnerability affects the login page’s input handling a...

CVE-2006-5959

SQL injection vulnerability in browse.asp in A+ Store E-Commerce allows remote attackers to execute arbitrary SQL commands via the ParentID parameter...

CVE-2006-5959: Undefined Security Weakness

SQL injection vulnerability in browse.asp in A+ Store E-Commerce allows remote attackers to execute arbitrary SQL commands via the ParentID parameter...

CVE-2006-5960: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in accountlogin.asp in A+ Store E-Commerce allow remote attackers to inject arbitrary web script or HTML via the 1 username txtUserName and 2 password txtPassword parameters. NOTE: portions of these details are obtained from third party informatio...

astoreecom.txt

vendor site:http://www.webinhabit.com/ product:A+ Store E-Commerce bug:injection sql & xss post risk:medium injection sql get : http://site.com/browse.asp?ParentID='sql xss post : in /accountlogin.asp: username = '"alertdocument.cookie'"alertdocument.cookie passwd =...

A+ Store E-Commerce[ injection sql & xss (post) ]

vendor site:http://www.webinhabit.com/ product:A+ Store E-Commerce bug:injection sql & xss post risk:medium injection sql get : http://site.com/browse.asp?ParentID='sql xss post : in /accountlogin.asp: username =...