CVE-2006-0532

CVE-2006-0532 describes an XSS vulnerability in resultat.asp of SoftMaker Shop. The attack vector is a crafted strSok parameter containing a javascript: URI in an IMG SRC, enabling remote script injection. Impact is partial integrity compromise with no confidentiality or availability impact per C...

SoftMaker Shop is vulnerable to XSS

Inputs in the SoftMaker Shop is not properly sanitized, and XSS is possible in a lot of the systems input fields and url parameters. Some fields have been filtered in a basic form, so that simple scripting like "scriptalert'XSS'/script" is not possible. However, since the filtering is not based o...

[SA18683] SoftMaker Shop resultat.asp Cross-Site Scripting

TITLE: SoftMaker Shop resultat.asp Cross-Site Scripting SECUNIA ADVISORY ID: SA18683 VERIFY ADVISORY: http://secunia.com/advisories/18683/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: SoftMaker Shop http://secunia.com/product/7406/ DESCRIPTION: Preben Nylkken...

SoftMaker Shop - Multiple Cross-Site Scripting Vulnerabilities

SoftMaker Shop - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16471/info SoftMaker Shop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage thes...

SoftMaker Shop - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16471/info SoftMaker Shop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser ...