CVE-2005-0935: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the 1 idpages parameter to pages.php or the 2 id2 parameter to products1.php...

ESMI PayPal StoreFront 1.7 - Cross-Site Scripting

ESMI PayPal StoreFront 1.7 - Cross-Site Scripting source: https://www.securityfocus.com/bid/12904/info ESMI PayPal Storefrom is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage th...

ESMI PayPal StoreFront 1.7 - 'products1.php?id2' SQL Injection

source: https://www.securityfocus.com/bid/12903/info ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query. Successful exploitation could result in a compromise ...

ESMI PayPal StoreFront 1.7 - 'pages.php?idpages' SQL Injection

source: https://www.securityfocus.com/bid/12903/info ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query. Successful exploitation could result in a compromise ...

ESMI PayPal StoreFront 1.7 - products1.php?id2 SQL Injection

ESMI PayPal StoreFront 1.7 - products1.php?id2 SQL Injection source: https://www.securityfocus.com/bid/12903/info ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL...

ESMI PayPal StoreFront 1.7 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/12904/info ESMI PayPal Storefrom is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in...

dcrab-paypal.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: Multiple sql injection, and xss vulnerabilities in Pay pal Storefronts Date: March 25, 2005 Vendor: http://www.esmistudio.com Summary:...

LaGarde StoreFront 5.0 Shopping Cart - login.asp SQL Injection

LaGarde StoreFront 5.0 Shopping Cart - login.asp SQL Injection source: https://www.securityfocus.com/bid/13998/info StoreFront Shopping Cart is affected by an SQL injection vulnerability. The vulnerability affects the 'login.asp' script. Successful exploitation could result in a compromise of the...

LaGarde StoreFront 5.0 Shopping Cart - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13998/info StoreFront Shopping Cart is affected by an SQL injection vulnerability. The vulnerability affects the 'login.asp' script. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit...

CVE-2003-0557

SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field...

CVE-2003-0557

CVE-2003-0557 describes an SQL injection vulnerability in login.asp for StoreFront 6.0 (and possibly earlier versions). The issue allows remote attackers to obtain sensitive user information via SQL statements in the password field. Per NVD metrics, the base score is 7.5 (HIGH) with network acces...

CVE-2003-0557

SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field...

CVE-2003-0557: Undefined Security Weakness

SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field...

ZH2003-3SA (security advisory): Storefront sql injection: users info disclosure

ZH2003-3SA security advisory: Storefront sql injection: users info disclosure Published: 12/07/2003 Released: 12/07/2003 Name: Storefront sql injection: users info disclosure Affected Systems: StoreFront 6.0 and older versions? Issue: Remote attackers can obtain users info Author:...