Cetera eCommerce - Multiple SQL Injections

source: https://www.securityfocus.com/bid/42058/info Cetera eCommerce is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues can allow an attacker to compromise the application, acces...

Cetera eCommerce - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42059/info Cetera eCommerce is prone to multiple cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code wou...

RealNetworks Helix and Helix Mobile Server Multiple RCE Vulnerabilities

RealNetworks Helix Server and Helix Mobile Server are prone to multiple memory-corruption vulnerabilities that can allow attackers to execute remote code. Exploiting these issues may allow attackers to gain unauthorized access to affected computers. Failed attempts may cause crashes and deny...