EUVD-2006-6056

Malware in sbrugna...

EUVD-2006-6057

Malware in sbrugna...

CVE-2006-6073

Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 ProductID parameter in productdetail.asp or the 2 categoryid parameter in products.asp...

CVE-2006-6074

Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via 1 the ProductID parameter in a reviews.asp, or the 2 catid or 3 subid parameter in b subProducts.asp. NOTE: the productdetail.asp vector is already covered by another...

CVE-2006-6074

Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via 1 the ProductID parameter in a reviews.asp, or the 2 catid or 3 subid parameter in b subProducts.asp. NOTE: the productdetail.asp vector is already covered by another...

CVE-2006-6073

Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 ProductID parameter in productdetail.asp or the 2 categoryid parameter in products.asp...

CVE-2006-6073

The CVE-2006-6073 entry describes multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart. The affected components are the productdetail.asp (ProductID parameter) and products.asp (categoryid parameter). The root cause is improper handling of user-supplied input leading to arbitrary ...

CVE-2006-6074

The CVE-2006-6074 entry concerns Enthrallweb eShopping Cart with multiple SQL injection vulnerabilities. The connected PT-2006-6719 document specifies the vulnerable vectors: user-supplied input in ProductID for reviews.asp, and in cat_id/sub_id for subProducts.asp. The root cause is unsanitized ...

eShopping Cart [injection sql]

vendor site:http://www.enthrallweb.com/ product:eShopping Cart bug:injection sql risk:medium injection sql : http://site.com/reviews.asp?ProductID='sql http://site.com/subProducts.asp?catid='sql http://site.com/productdetail.asp?ProductID='sql http://site.com/subProducts.asp?catid=27&subid='sql...

eshopping.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/eShopping.txt ----------------------------------------------------------- Software: eShopping Cart Method : SQL Injection PoC: http://target/productdetail.asp?ProductID=SQL CODE...

ECommerce Store Shop Builder

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/eShopping.txt ----------------------------------------------------------- Software: eShopping Cart Method : SQL Injection PoC:...

eShopping SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/ecommercestore.txt ----------------------------------------------------------- Software: E Commerce Store Shop Builder Method : SQL Injection PoC:...