EUVD-2008-6720

Malware in sbrugna...

CVE-2008-6758

Cross-site request forgery CSRF vulnerability in cartsave.php in ViArt Shop aka Shopping Cart 3.5 allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting XSS attacks via the cartname parameter in a save action...

CVE-2008-6758

This CVE concerns ViArt Shop (Shopping Cart) 3.5. The vulnerability is a Cross‑Site Request Forgery (CSRF) in cart_save.php that allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross‑site scripting (XSS) via the cart_name parameter in a...

CVE-2008-6758: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in cartsave.php in ViArt Shop aka Shopping Cart 3.5 allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting XSS attacks via the cartname parameter in a save action...

CVE-2008-6766: Undefined Security Weakness

cartsave.php in ViArt Shop aka Shopping Cart 3.5 allows remote attackers to cause a denial of service excessive shopping carts via a flood of requests...

CVE-2008-6760: Improper Link Resolution Before File Access

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a shopping cart in cartsave.php, which reveals the SQL table names in an error message, related to code that mishandles the lack of a userid parameter...