CVE-2006-3234: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 produkt, 2 idproduc, and 3 idkat parameters...

CVE-2006-3235: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 promocja, 2 wysw, or 3 idproduc parameters...