CVE-2015-2244

Multiple cross-site scripting XSS vulnerabilities in Webshop hun 1.062S allow remote attackers to inject arbitrary web script or HTML via the 1 param, 2 center, 3 lap, 4 termid, or 5 nyelvid parameter to index.php...

CVE-2015-2243

Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php...

Webshop hun Multiple Vulnerabilities

Webshop hun is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2244

Multiple cross-site scripting XSS vulnerabilities in Webshop hun 1.062S allow remote attackers to inject arbitrary web script or HTML via the 1 param, 2 center, 3 lap, 4 termid, or 5 nyelvid parameter to index.php...

CVE-2015-2243

Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php...

CVE-2015-2242

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the 1 termid or 2 nyelvid parameter to index.php...

Sql injection

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the 1 termid or 2 nyelvid parameter to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Webshop hun 1.062S allow remote attackers to inject arbitrary web script or HTML via the 1 param, 2 center, 3 lap, 4 termid, or 5 nyelvid parameter to index.php...

Directory traversal

Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php...

CVE-2015-2242

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the 1 termid or 2 nyelvid parameter to index.php...

CVE-2015-2242

CVE-2015-2242 concerns multiple SQL injection vulnerabilities in the Webshop hun 1.062S. The affected component is the web application’s index.php, exploitable via user-controlled parameters (1) termid and (2) nyelv_id). The underlying issue is SQL injection that allows remote attackers to execut...

CVE-2015-2243

CVE-2015-2243 affects Webshop hun 1.062S. The issue is a directory traversal vulnerability in index.php via the mappa parameter, enabling remote attackers to traverse directories and view restricted files. Root cause is improper handling of directory paths in user-supplied input. The NVD entry li...

CVE-2015-2244

CVE-2015-2244 involves multiple XSS vulnerabilities in Webshop hun 1.062S where remote attackers can inject arbitrary script or HTML via the index.php parameters (param, center, lap, termid, nyelv_id). Affected software: Webshop hun 1.062S. The root cause is insufficient input sanitization on tho...

CVE-2015-2243

Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php...

PT-2015-5683

Name of the Vulnerable Software and Affected Versions Webshop hun version 1.062S Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the termid or nyelv id parameter to the "index.php" endpoint. Recommendations For version 1.062S, consider...

CVE-2015-2242: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the 1 termid or 2 nyelvid parameter to index.php...

CVE-2015-2244: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Webshop hun 1.062S allow remote attackers to inject arbitrary web script or HTML via the 1 param, 2 center, 3 lap, 4 termid, or 5 nyelvid parameter to index.php...

PT-2015-5685

Name of the Vulnerable Software and Affected Versions Webshop hun version 1.062S Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters in index.php, specifically the param, center, lap, termid, or nyelv id parameters. Recommendations For...

PT-2015-5684

Name of the Vulnerable Software and Affected Versions Webshop hun version 1.062S Description A directory traversal issue exists, allowing remote attackers to have an unspecified impact by using directory traversal sequences in the mappa parameter to the "index.php" endpoint. Recommendations For...

CVE-2015-2243: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php...