EUVD-2004-0350

Malware in sbrugna...

EUVD-2004-0348

Malware in sbrugna...

SpiderSales 2.0 Shopping Cart Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/9799/info Multiple vulnerabilities have been identified in the application that may allow an attacker to obtain the private cryptographic key and gain access to sensitive information. The application is also reported pron...

CVE-2004-0348

SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter...

CVE-2004-0350

SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring...

CVE-2004-0350

The CVE-2004-0350 entry affects the SpiderSales shopping cart, which does not enforce a minimum length for the private key. This weakens key material quality and can let local users obtain the private key by factoring, with an in‑the‑wild risk limited by local access and a low base score (2.1). T...

CVE-2004-0348

SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter...

CVE-2004-0348

CVE-2004-0348 pertains to SpiderSales Shopping Cart software, affecting the viewCart.asp component. The root cause is an SQL injection via the userId parameter, enabling a remote attacker to execute arbitrary SQL statements with full impact on confidentiality, integrity, and availability (CVSS v2...

CVE-2004-0350

SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring...

CVE-2004-0348: Undefined Security Weakness

SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter...

CVE-2004-0350: Undefined Security Weakness

SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring...

SpiderSales Shopping Cart SQL injection

The remote host is running the SpiderSales Shopping Cart CGI suite. There is a bug in this suite which may allow an attacker to force it to execute arbitrary SQL statements on the remote host. An attacker may use this flaw to gain the control of the remote website and possibly execute arbitrary...

SpiderSales 2.0 Shopping Cart - Multiple Vulnerabilities

SpiderSales 2.0 Shopping Cart - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/9799/info Multiple vulnerabilities have been identified in the application that may allow an attacker to obtain the private cryptographic key and gain access to sensitive information. The applicatio...

SpiderSales 2.0 Shopping Cart - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/9799/info Multiple vulnerabilities have been identified in the application that may allow an attacker to obtain the private cryptographic key and gain access to sensitive information. The application is also reported prone to an SQL injection vulnerabilit...