26 matches found
EUVD-2006-5941
Malware in sbrugna...
INFINICART sendpassword.asp email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit ...
INFINICART browse_group.asp groupid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit ...
INFINICART login.asp Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit ...
INFINICART search.asp search Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit ...
INFINICART browsesubcat.asp Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit ...
INFINICART added_to_cart.asp productid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit ...
CVE-2006-5957
Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the 1 groupid parameter in a browsegroup.asp, 2 productid parameter in b addedtocart.asp, and 3 catid and 4 subid parameter in c browsesubcat.asp. NOTE: the vendor has disputed this...
CVE-2006-5958
Multiple cross-site scripting XSS vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script or HTML via the 1 username and 2 password fields in a login.asp, 3 search field in b search.asp, and 4 email field in c sendpassword.asp...
CVE-2006-5957
Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the 1 groupid parameter in a browsegroup.asp, 2 productid parameter in b addedtocart.asp, and 3 catid and 4 subid parameter in c browsesubcat.asp. NOTE: the vendor has disputed this...
CVE-2006-5957
INFINICART is affected by multiple SQL injection vulnerabilities reported as CVE-2006-5957. Public details specify that remote attackers could manipulate SQL by supplying crafted input in the following parameters: groupid (browse_group.asp), productid (added_to_cart.asp), and catid/subid (browses...
CVE-2006-5958
Multiple cross-site scripting XSS vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script or HTML via the 1 username and 2 password fields in a login.asp, 3 search field in b search.asp, and 4 email field in c sendpassword.asp...
infinicart [ multiples injection sql & xss (post) ]
vendor site: http://www.ecommercemax.com/ product : infinicart bug: multiples injection sql & xss language : asp risk : high injection sql get: /infinicart-demo/browsegroup.asp?groupid=sql /infinicart-demo/addedtocart.asp?productid=sql /infinicart-demo/browsesubcat.asp?catid=sql...
infinicart.txt
vendor site: http://www.ecommercemax.com/ product : infinicart bug: multiples injection sql & xss language : asp risk : high injection sql get: /infinicart-demo/browsegroup.asp?groupid=sql /infinicart-demo/addedtocart.asp?productid=sql /infinicart-demo/browsesubcat.asp?catid=sql...
INFINICART - browse_group.asp?groupid SQL Injection
INFINICART - browsegroup.asp?groupid SQL Injection source: https://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A...
INFINICART - 'added_to_cart.asp?ProductID' SQL Injection
source: https://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could all...
INFINICART - 'search.asp?search' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could all...
INFINICART - 'sendpassword.asp?email' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could all...
INFINICART - 'login.asp' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could all...
INFINICART - login.asp Multiple Cross-Site Scripting Vulnerabilities
INFINICART - login.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize...