CVE-2006-3155

This CVE (CVE-2006-3155) affects Ultimate Auction 1.0 and earlier. The vulnerability consists of multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via user-controlled input parameters in several scripts: (1) item parameter in emailtofrien...

CVE-2006-3156

CVE-2006-3156 describes a cross-site scripting (XSS) vulnerability in the web application, specifically in the file index.cgi of Ultimate eShop 1.0 and earlier. The issue is exploitable via the subid parameter and allows remote attackers to inject arbitrary web script or HTML. The available metad...

CVE-2006-3153: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-3155: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 item parameter in a emailtofriend.pl or b violation.pl, 2 seller parameter in c vsoa.pl, 3 user parameter in d userask.pl or e leavefeed.pl...

CVE-2006-3156: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the subid parameter...

CVE-2006-3154: Undefined Security Weakness

SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Ultimate PHP Board <= 1.96 GOLD Multiple Vulnerabilities Exploit

No description provided by source. ?php / Advisory: http://www.kliconsulting.com/users/mbrooks/UPBadvisory.rtf Vendors site: http://forum.myupb.com/ Download: http://fileserv.myupb.com/download.php?url=upb196GOLD.zip http://prdownloads.sourceforge.net/textmb/upb1.8.2.zip?download Download Mirror:...

Ultimate PHP Board multiple XSS vulnerabilities

The remote version of Ultimate PHP Board UPB is affected by several cross-site scripting vulnerabilities. This issue is due to a failure of the application to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attackers to inject arbitrary web script or HTML via the 1 ortak or 2 kat parameter...

CVE-2006-0534: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attackers to inject arbitrary web script or HTML via the 1 ortak or 2 kat parameter...

CyberShop Ultimate E-Commerce - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16473/info CyberShop Ultimate E-commerce is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issue to have arbitrary scrip...

ua367XSS.txt

Hello! I've found a XSS in Ultimate Auction alert"XSS" http://www.ultimate-auction.de/cgi-local/auktion/itemlist.pl?category=alert"XSS" The bug has the BID 16239...

CVE-2006-0217

Multiple cross-site scripting XSS vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary web script or HTML via the 1 item parameter in item.pl and 2 category parameter in itemlist.pl, which reflects the XSS in an error message. NOTE: the affected version might be wro...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary web script or HTML via the 1 item parameter in item.pl and 2 category parameter in itemlist.pl, which reflects the XSS in an error message. NOTE: the affected version might be wro...

CVE-2006-0217

Affected software: Ultimate Auction. Vulnerability: multiple cross-site scripting (XSS) flaws allowing remote injection via item.pl (item parameter) and itemlist.pl (category parameter) with the XSS reflected in an error message. Affected version note mentions 3.6.1 as of 20060116; the entry itse...

Ultimate Auction 3.67 - ItemList.pl Cross-Site Scripting

source: https://www.securityfocus.com/bid/16254/info Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

CVE-2006-0217: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary web script or HTML via the 1 item parameter in item.pl and 2 category parameter in itemlist.pl, which reflects the XSS in an error message. NOTE: the affected version might be wro...

Ultimate Auction 3.67 - ItemList.pl Cross-Site Scripting

Ultimate Auction 3.67 - ItemList.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/16254/info Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage thi...

[Full-disclosure] Ultimate Auction <=3.67

Hello! I've found a XSS in Ultimate Auction =3.67. The Vendor was informed mid October 2005! They still haven't fix the script and doesn't reply to mails. Here's a little Example: http://www.ultimate-auction.de/cgi-local/auktion/item.pl/item.pl?item=scriptalert"XSS"/script...

Ultimate Auction 3.67 - Item.pl Cross-Site Scripting

Ultimate Auction 3.67 - Item.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/16239/info Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...