CVE-2005-1362

CVE-2005-1362 affects MetaCart 2.0 for Paypal. The vulnerability consists of multiple SQL injection flaws exploitable via parameters to specific scripts: (1) intProdID to product.asp, (2) intCatalogID or (3) strSubCatalogID to productsByCategory.asp, and (4) chkText, (5) strText, (6) chkPrice, (7...

CVE-2005-1362

Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the 1 intProdID parameter to product.asp, 2 intCatalogID or 3 strSubCatalogID parameters to productsByCategory.asp, 4 chkText, 5 strText, 6 chkPrice, 7 intPrice, 8 chkCat...

CVE-2005-1362: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the 1 intProdID parameter to product.asp, 2 intCatalogID or 3 strSubCatalogID parameters to productsByCategory.asp, 4 chkText, 5 strText, 6 chkPrice, 7 intPrice, 8 chkCat...

Multiple SQL Injections in MetaCart2 for PayPal

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple SQL Injections in...

CVE-2005-0897

CVE-2005-0897 describes a PHP remote file inclusion vulnerability in the catalog.php file of the E-Store Kit-2 PayPal Edition. The issue arises from allowing the menu and main parameters to reference a URL on a remote server, enabling an attacker to cause the application to include and execute ar...

CVE-2005-0935

CVE-2005-0935 affects the ESMI PayPal Storefront. The provided documents describe multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands through two parameters: idpages in pages.php and id2 in products1.php. The affected software is the PayPal Storefr...

CVE-2005-0897

PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code...

CVE-2005-0935

Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the 1 idpages parameter to pages.php or the 2 id2 parameter to products1.php...

CVE-2005-0936

CVE-2005-0936 describes a cross-site scripting vulnerability in the PayPal Storefront component, specifically in the file products1h.php, where the id parameter can be abused to inject arbitrary web script or HTML. Affected software is indicated as ESMI PayPal Storefront; the vulnerability is cat...

CVE-2005-0898

CVE-2005-0898 describes a cross-site scripting (XSS) vulnerability in the PHP file downloadform.php of the E-Store Kit-2 PayPal Edition. The flaw allows remote attackers to inject arbitrary web script or HTML by supplying a crafted txn_id parameter, potentially impacting users who view the affect...

CVE-2005-0936

Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-0898

Cross-site scripting XSS vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txnid parameter...

CVE-2005-0935: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the 1 idpages parameter to pages.php or the 2 id2 parameter to products1.php...

CVE-2005-0897: Undefined Security Weakness

PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code...

CVE-2005-0936: Undefined Security Weakness

Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-0898: Undefined Security Weakness

Cross-site scripting XSS vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txnid parameter...

File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition

Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition Date: March 26, 2005 Summary: There are file include and xss vulnerabilities in E-Store Kit-2 PayPal Edition...

CVE-2005-0898

Cross-site scripting XSS vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txnid parameter...

MagicScripts E-Store Kit-2 PayPal Edition - Cross-Site Scripting

MagicScripts E-Store Kit-2 PayPal Edition - Cross-Site Scripting source: https://www.securityfocus.com/bid/12909/info MagicScripts E-Store Kit-2 PayPal Edition is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code executed in the brows...

ESMI PayPal StoreFront 1.7 - products1.php?id2 SQL Injection

ESMI PayPal StoreFront 1.7 - products1.php?id2 SQL Injection source: https://www.securityfocus.com/bid/12903/info ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL...