17 matches found
EUVD-2004-1791
Malware in sbrugna...
FreznoShop 1.2.3/1.3 Search Script Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9359/info FreznoShop is prone to a cross-site scripting vulnerability. Remote attackers may create malicious links to the software that include hostile HTML and script code. If such a link was followed by a victim user, t...
FreznoShop Detection
This host is running FreznoShop, a shopping cart system. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
FreznoShop 'product_details.php' SQL Injection Vulnerability
FreznoShop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlyi...
FreznoShop Detection
This host is running FreznoShop, a shopping cart system. OpenVAS Vulnerability Test $Id: freznoshopdetect.nasl 5721 2017-03-24 14:42:01Z cfi $ FreznoShop Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can redistribute it...
FreznoShop 1.3.0 SQL Injection
====================================================================================== o FreznoShop 1.3.0 SQL Injection Vulnerability Software : FreznoShop version 1.3.0 Vendor : http://sourceforge.net/projects/freznoshop/ Download : http://sourceforge.net/project/platformdownload.php?groupid=860...
FreznoShop 1.3.0 (id) Remote SQL Injection Vulnerability
No description provided by source. ====================================================================================== o FreznoShop 1.3.0 SQL Injection Vulnerability Software : FreznoShop version 1.3.0 Vendor : http://sourceforge.net/projects/freznoshop/ Download :...
FreznoShop 1.3.0 - id SQL Injection
FreznoShop 1.3.0 - id SQL Injection ====================================================================================== o FreznoShop 1.3.0 SQL Injection Vulnerability Software : FreznoShop version 1.3.0 Vendor : http://sourceforge.net/projects/freznoshop/ Download :...
FreznoShop 1.3.0 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================== FreznoShop 1.3.0 id Remote SQL Injection Vulnerability ========================================================...
FreznoShop 1.3.0 - 'id' SQL Injection
====================================================================================== o FreznoShop 1.3.0 SQL Injection Vulnerability Software : FreznoShop version 1.3.0 Vendor : http://sourceforge.net/projects/freznoshop/ Download : http://sourceforge.net/project/platformdownload.php?groupid=860...
FreznoShopSQL.txt
FreznoShop Vulnerability Details Date: May 13, 2005 Mike Shema Versions of FreznoShop http://www.freznoshop.de/ below 1.4.1 are vulnerable to SQL injection due to the use of unvalidated parameters in database queries. Some unpatched versions of 1.4.1 are vulnerable as well. The value of the 'id'...
CVE-2004-1797
Cross-site scripting XSS vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2004-1797
CVE-2004-1797 is described as a Cross-site scripting (XSS) vulnerability in FreznoShop 1.3.0 RC1 and earlier, exploitable via the search parameter in search.php. The affected software is FreznoShop; the vulnerable file/function is search.php, where user-supplied input in the search parameter can ...
CVE-2004-1797
Cross-site scripting XSS vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...
[UNIX] FreznoShop Cross Site Scripting Vulnerability (search.php)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
FreznoShop 1.2.3/1.3 - Search Script Cross-Site Scripting
source: https://www.securityfocus.com/bid/9359/info FreznoShop is prone to a cross-site scripting vulnerability. Remote attackers may create malicious links to the software that include hostile HTML and script code. If such a link was followed by a victim user, the attacker-supplied code would be...
FreznoShop 1.2.31.3 - Search Script Cross-Site Scripting
FreznoShop 1.2.31.3 - Search Script Cross-Site Scripting source: https://www.securityfocus.com/bid/9359/info FreznoShop is prone to a cross-site scripting vulnerability. Remote attackers may create malicious links to the software that include hostile HTML and script code. If such a link was...