CVE-2005-1292

Multiple cross-site scripting XSS vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to 1 tellAFriend.asp or 2 addToWishlist.asp, redirect parameter to 3 access.asp or 4 login.asp, message parameter to 5 login.asp or 6...

CVE-2005-1364: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password fields in logIn.asp, or 3 intAuctionID parameter to item.asp...

CVE-2005-1292

Multiple cross-site scripting XSS vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to 1 tellAFriend.asp or 2 addToWishlist.asp, redirect parameter to 3 access.asp or 4 login.asp, message parameter to 5 login.asp or 6...

CartWIZ 1.10 - 'login.asp' Message Argument Cross-Site Scripting

source: https://www.securityfocus.com/bid/13341/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

CartWIZ 1.10 - 'login.asp' Redirect Argument Cross-Site Scripting

source: https://www.securityfocus.com/bid/13340/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

CartWIZ 1.10 - login.asp Message Argument Cross-Site Scripting

CartWIZ 1.10 - login.asp Message Argument Cross-Site Scripting source: https://www.securityfocus.com/bid/13341/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

CVE-2005-1221: Undefined Security Weakness

SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2005-1149

CVE-2005-1149 is a SQL injection flaw in aspclick.it ACNews 1.0, affecting admin/login.asp where the (1) username and (2) password parameters are unsafely handled. The Red Hat advisory echoes the same description, indicating remote attackers could execute arbitrary SQL commands. The available doc...

CVE-2005-1149: Undefined Security Weakness

SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

CVE-2005-0925: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2005-0423

ASPjar Guestbook is affected by a SQL injection in login.asp that allows remote attackers to execute arbitrary SQL commands via the password field. The vulnerability is documented in multiple sources (e.g., NVD and OpenVAS entries) with the same basic vector (unvalidated input in login form). The...

CVE-2005-0423: Undefined Security Weakness

SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2004-0236

CVE-2004-0236 concerns a SQL injection in login.asp of thePHOTOtool, allowing remote attackers to gain unauthorized access via the password field. The vulnerability is described across multiple sources (NVD/CVE databases) with a high impact and remote exploitation potential. Connected documents c...

CVE-2004-0236: Undefined Security Weakness

SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field...

LaGarde StoreFront 5.0 Shopping Cart - login.asp SQL Injection

LaGarde StoreFront 5.0 Shopping Cart - login.asp SQL Injection source: https://www.securityfocus.com/bid/13998/info StoreFront Shopping Cart is affected by an SQL injection vulnerability. The vulnerability affects the 'login.asp' script. Successful exploitation could result in a compromise of the...

LaGarde StoreFront 5.0 Shopping Cart - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13998/info StoreFront Shopping Cart is affected by an SQL injection vulnerability. The vulnerability affects the 'login.asp' script. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit...

CVE-2003-0557: Undefined Security Weakness

SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field...

CVE-2003-0522: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to 1 gain access to the admin control panel via the idadmin parameter to login.asp or 2 gain other privileges via the Email parameter to Custva.asp...