CVE-2005-4356

SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4355

CVE-2005-4355 : The data shows multiple cross-site scripting (XSS) vulnerabilities in the UStore web application. The issues affect parameters in the public and admin interfaces: (1) the Cat parameter in default.asp and (2) the accessdenied parameter in admin/default.asp. The root cause is improp...

CVE-2005-4355

Multiple cross-site scripting XSS vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the 1 Cat parameter in default.asp and the 2 accessdenied parameter in admin/default.asp. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2005-4355: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the 1 Cat parameter in default.asp and the 2 accessdenied parameter in admin/default.asp. NOTE: the provenance of this information is unknown; the details are obtained...

[SA18026] UStore Cross-Site Scripting and SQL Injection Vulnerabilities

TITLE: UStore Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18026 VERIFY ADVISORY: http://secunia.com/advisories/18026/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: UStore...

CVE-2005-4356: Undefined Security Weakness

SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...