CVE-2006-3800

CVE-2006-3800 describes a cross-site scripting (XSS) vulnerability in the Amazing Flash AFCommerce Shopping Cart. The issue allows remote attackers to inject arbitrary web script or HTML via the “new review” text box. Documents do not specify affected versions, root cause details beyond the input...

PT-2006-4654 · Amazing Flash · Amazing Flash Afcommerce Shopping Cart

Name of the Vulnerable Software and Affected Versions: Amazing Flash AFCommerce Shopping Cart affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the search field, potentially leading to unauthorized access or data manipulation...