EUVD-2006-3027

Malware in sbrugna...

CVE-2006-3030

Multiple cross-site scripting XSS vulnerabilities in DwZone Shopping Cart 1.1.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ToCategory and 2 FromCategory parameters to a ProductDetailsForm.asp and 3 UserName and 4 Password parameters to b...

CVE-2006-3030

Multiple cross-site scripting XSS vulnerabilities in DwZone Shopping Cart 1.1.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ToCategory and 2 FromCategory parameters to a ProductDetailsForm.asp and 3 UserName and 4 Password parameters to b...

CVE-2006-3030

DwZone Shopping Cart prior to or at version 1.1.9 has multiple XSS vulnerabilities. The issue arises in the web app’s handling of user input parameters: (1) ToCategory and (2) FromCategory to ProductDetailsForm.asp, and (3) UserName and (4) Password to LogIn/VerifyUserLog.asp. The flaws allow rem...