CVE-2007-0179: Undefined Security Weakness

SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the subid parameter...

PT-2006-6622 · Infinicart · Infinicart

Name of the Vulnerable Software and Affected Versions: INFINICART affected versions not specified Description: The issue concerns SQL injection vulnerabilities that could allow remote attackers to execute arbitrary SQL commands. This is possible via several parameters in different ASP files,...

CVE-2006-5957: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the 1 groupid parameter in a browsegroup.asp, 2 productid parameter in b addedtocart.asp, and 3 catid and 4 subid parameter in c browsesubcat.asp. NOTE: the vendor has disputed this...

CVE-2006-3156

Cross-site scripting XSS vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the subid parameter...

CVE-2006-3156

Cross-site scripting XSS vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the subid parameter...

CVE-2006-3156: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the subid parameter...

CVE-2004-1668: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the 1 pageid, 2 subid, or 3 catid parameters...