EUVD-2010-4123

Malware in sbrugna...

EUVD-2006-2166

Malware in sbrugna...

EUVD-2008-6928

Malware in sbrugna...

EUVD-2006-2165

Malware in sbrugna...

CVE-2010-4147

Multiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier allow remote attackers to execute arbitrary SQL commands via the User-Agent header to 1 index.php and 2 product-list.php...

CVE-2010-4147

CVE-2010-4147 affects Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier. The vulnerability is multiple SQL injections exploitable via the User-Agent header to index.php and product-list.php, enabling remote attackers to execute arbitrary SQL commands. Documents do not prov...

CVE-2010-4147: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier allow remote attackers to execute arbitrary SQL commands via the User-Agent header to 1 index.php and 2 product-list.php...

CVE-2008-6969

Multiple cross-site scripting XSS vulnerabilities in checkout.php in Avactis Shopping Cart 1.8.0 and 1.8.1 allow remote attackers to inject arbitrary web script or HTML via the 1 stepid and 2 CHECKOUTCZBLOWFISHKEY parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in checkout.php in Avactis Shopping Cart 1.8.0 and 1.8.1 allow remote attackers to inject arbitrary web script or HTML via the 1 stepid and 2 CHECKOUTCZBLOWFISHKEY parameters...

CVE-2008-6969

CVE-2008-6969 concerns multiple cross-site scripting (XSS) vulnerabilities in Avactis Shopping Cart, specifically in checkout.php for versions 1.8.0 and 1.8.1. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) step_id and (2) CHECKOUT_CZ_BLOWFISH_KEY parameters....

CVE-2008-6969

Multiple cross-site scripting XSS vulnerabilities in checkout.php in Avactis Shopping Cart 1.8.0 and 1.8.1 allow remote attackers to inject arbitrary web script or HTML via the 1 stepid and 2 CHECKOUTCZBLOWFISHKEY parameters...

CVE-2008-6969: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in checkout.php in Avactis Shopping Cart 1.8.0 and 1.8.1 allow remote attackers to inject arbitrary web script or HTML via the 1 stepid and 2 CHECKOUTCZBLOWFISHKEY parameters...

Sql injection

Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 categoryid parameter in a storespecialoffers.php and b store.php, and 2 prodid parameter in c cart.php and d productinfo.php. NOTE: this issue also...

CVE-2006-2164

Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 categoryid parameter in a storespecialoffers.php and b store.php, and 2 prodid parameter in c cart.php and d productinfo.php. NOTE: this issue also...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter in a storespecialoffers.php and b store.php and 2 prodid parameter in c productinfo.php. NOTE: this issue might...

CVE-2006-2165

Multiple cross-site scripting XSS vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter in a storespecialoffers.php and b store.php and 2 prodid parameter in c productinfo.php. NOTE: this issue might...

CVE-2006-2164

CVE-2006-2164 affects Avactis Shopping Cart 0.1.2 and earlier, with SQL injection via the parameters category_id in (a) store_special_offers.php and (b) store.php, and prod_id in (c) cart.php and (d) product_info.php. The issue may also cause full path disclosure from invalid SQL queries. No expl...

CVE-2006-2164

Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 categoryid parameter in a storespecialoffers.php and b store.php, and 2 prodid parameter in c cart.php and d productinfo.php. NOTE: this issue also...

CVE-2006-2165

CVE-2006-2165 affects Avactis Shopping Cart

CVE-2006-2165: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter in a storespecialoffers.php and b store.php and 2 prodid parameter in c productinfo.php. NOTE: this issue might...