EUVD-2004-2165

Malware in sbrugna...

EUVD-2004-2166

Malware in sbrugna...

EUVD-2003-1294

Malware in sbrugna...

CVE-2003-1304

Affected software: EarlyImpact ProductCart 1.0–2.0. Vulnerability: storing database/EIPC.mdb under the web root with insufficient access control, enabling remote retrieval of sensitive data via direct requests. Impact: exposure of database contents; specifics on exploitability/real-world exploita...

CVE-2003-1304

EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information via a direct request...

CVE-2004-2173

SQL injection vulnerability in advSearchh.asp in EarlyImpact ProductCart allows remote attackers to execute arbitrary SQL commands via the priceUntil parameter...

CVE-2004-2172

EarlyImpact ProductCart is affected by a vulnerability where passwords are encrypted with a weak scheme, enabling remote attackers to obtain passwords through a chosen-plaintext attack. Affected versions are not clearly specified in the provided documents. The available sources do not indicate a ...

CVE-2004-2173

CVE-2004-2173 affects EarlyImpact ProductCart (advSearch_h.asp) where the priceUntil parameter enables SQL injection, allowing remote execution of arbitrary SQL commands. Root cause: unsafely concatenated input in the SQL query. Impact per sources: partial confidentiality, integrity, and availabi...

CVE-2004-2174

Cross-site scripting XSS vulnerability in Custva.asp in EarlyImpact ProductCart allows remote attackers to inject arbitrary Javascript via the redirectUrl parameter...

CVE-2004-2174

CVE-2004-2174 describes a cross-site scripting (XSS) vulnerability in Custva.asp within EarlyImpact ProductCart, where remote attackers can inject arbitrary JavaScript via the redirectUrl parameter. The NVD entry lists the affected product as EarlyImpact ProductCart and cites a MEDIUM severity (C...

CVE-2004-2172

EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack...

CVE-2004-2174

Cross-site scripting XSS vulnerability in Custva.asp in EarlyImpact ProductCart allows remote attackers to inject arbitrary Javascript via the redirectUrl parameter...

CVE-2004-2173

SQL injection vulnerability in advSearchh.asp in EarlyImpact ProductCart allows remote attackers to execute arbitrary SQL commands via the priceUntil parameter...

CVE-2003-1304

EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information via a direct request...