EUVD-2004-1799

Malware in sbrugna...

EUVD-2004-1800

Malware in sbrugna...

CVE-2004-1807

CVE-2004-1807 describes a cross-site scripting (XSS) vulnerability in CFWebstore 5.0’s index.cfm that allows remote attackers to inject arbitrary script or HTML via the URL. The issue affects CFWebstore 5.0, with the root cause per the records being a client-side/script injection vulnerability in...

CVE-2004-1806

CFWebStore CFWebStore 5.0.x is vulnerable to SQL injection in index.cfm via the parameters category_id, product_id, or feature_id. The root cause is unsafe SQL construction, enabling remote attackers to run arbitrary SQL and potentially gain administrative access on affected hosts. The assessment...

CVE-2004-1806

SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the 1 categoryid, 2 productid, or 3 featureid parameters...

CVE-2004-1807

Cross-site scripting XSS vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2004-1807: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2004-1806: Undefined Security Weakness

SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the 1 categoryid, 2 productid, or 3 featureid parameters...

CVE-2004-1806

SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the 1 categoryid, 2 productid, or 3 featureid parameters...

CVE-2004-1807

Cross-site scripting XSS vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web script or HTML via the URL...

cfWebStore Multiple Vulnerabilities (SQLi, XSS)

The remote host is running cfWebStore 5.0.0 or older. There is a flaw in this software that could allow a remote attacker to execute arbitrary SQL statements in the remote database that could in turn be used to gain administrative access on the remote host, read, or modify the content of the remo...

[Full-Disclosure] Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities

S-Quadra Advisory 2004-03-12 Topic: Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities Severity: High Vendor URL: http://www.cfwebstore.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040312.txt Release date: 12 Mar 2004 1. DESCRIPTION "CFWebstore...