7 matches found
CVE-2020-37003 Sellacious eCommerce 4.6 - Persistent Cross-Site Scripting
Sellacious eCommerce 4.6 contains a persistent cross-site scripting vulnerability in the Manage Your Addresses module that allows attackers to inject malicious scripts. Attackers can exploit multiple address input fields like full name, company, and address to execute persistent script code that...
EUVD-2008-6351
Malware in sbrugna...
SA-CONTRIB-2011-036 - Addresses - Cross Site Scripting
This module enables you to link your users and contents to physical addresses. The module doesn't sufficiently filter output when displaying an address. This vulnerability is mitigated by the fact that the module doesn't use the single line display by default, an administrator has to enable that...
CVE-2008-6381
SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter...
Sql injection
SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter...
CVE-2008-6381
The CVE-2008-6381 entry describes an SQL injection in bcoos 1.0.13 (and possibly earlier) affecting the module at modules/adresses/viewcat.php. The vulnerability can be triggered by the cid parameter by remote authenticated users who have Addresses module permissions, allowing arbitrary SQL comma...
CVE-2008-6381
SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter...