EUVD-2006-6542

Malware in sbrugna...

CVE-2006-6559

The CVE-2006-6559 entry documents an SQL injection vulnerability in Lotfian Request For Travel 1.0, specifically in ProductDetails.asp where the PID parameter can be exploited to execute arbitrary SQL commands remotely. Affected component: ProductDetails.asp in Lotfian Request For Travel 1.0. Roo...

CVE-2006-6559: Undefined Security Weakness

SQL injection vulnerability in ProductDetails.asp in Lotfian Request For Travel 1.0 allows remote attackers to execute arbitrary SQL commands via the PID parameter...

CVE-2005-1291

Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to 1 addToCart.asp or 2 productDetails.asp, the 3 priceFrom, 4 idCategory, or 5 priceTo parameter to searchResults.asp, or 6 the idParentCategory paramet...

CVE-2005-1291: Undefined Security Weakness

Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to 1 addToCart.asp or 2 productDetails.asp, the 3 priceFrom, 4 idCategory, or 5 priceTo parameter to searchResults.asp, or 6 the idParentCategory paramet...