23 matches found
EUVD-2005-1364
Malware in sbrugna...
EUVD-2005-1625
Malware in sbrugna...
MetaCart E-Shop V-8 IntProdID Parameter Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13376/info An SQL injection vulnerability affects MetaCart e-Shop V-8. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may explo...
MetaCart E-Shop V-8 StrCatalog_NAME Parameter Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13377/info An SQL injection vulnerability affects MetaCart e-Shop V-8. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may explo...
MetaCart E-Shop ProductsByCategory.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13639/info MetaCart e-Shop is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrar...
metacarteshop.txt
vendor site:http://metalinks.com/ product:MetaCart e-Shop bug:injection sql risk:medium injection sql get : http://site.com/metacart/productsByCategory.asp?intCatalogID='sql http://site.com/metacart/product.asp?intProdID='sql injection sqlpost : 1 http://site.com/metacart/searchAction.asp variabl...
MetaCart e-Shop [multiples injection sql (get & post)]
vendor site:http://metalinks.com/ product:MetaCart e-Shop bug:injection sql risk:medium injection sql get : http://site.com/metacart/productsByCategory.asp?intCatalogID='sql http://site.com/metacart/product.asp?intProdID='sql injection sqlpost : 1 http://site.com/metacart/searchAction.asp variabl...
MetaCart E-Shop ProductsByCategory.ASP SQL and XSS Injection Vulnerabilities
Due to a lack of user input validation, the remote version of MetaCart e-Shop is vulnerable to various SQL injection vulnerabilities and cross site scripting attacks. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are...
Echo Security Advisory 2005.13
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV13$2005 --------------------------------------------------------------------------- Multiple Vulnerabilities in MetaCart e-Shop ---------------------------------------------------------------------------...
MetaCart E-Shop productsByCategory.ASP Multiple Vulnerabilities
The remote host is running the MetaCart e-Shop, an online store written in ASP. Due to a lack of user input validation, the remote version of this software is vulnerable to various SQL injection and cross-site scripting attacks. An attacker may exploit these flaws to execute arbitrary SQL command...
Multiple Vulnerabilities in MetaCart e-Shop
/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV13$2005 --------------------------------------------------------------------------- Multiple Vulnerabilities in MetaCart e-Shop --------------------------------------------------------------------------- Author: Dedi Dwianto Date: May, 16t...
CVE-2005-1622
Cross-site scripting XSS vulnerability in productsByCategory.asp in MetaCart e-Shop allows remote attackers to inject arbitrary web script or HTML via the strCatalogNAME parameter...
CVE-2005-1622
Cross-site scripting XSS vulnerability in productsByCategory.asp in MetaCart e-Shop allows remote attackers to inject arbitrary web script or HTML via the strCatalogNAME parameter...
CVE-2005-1622
MetaCart e-Shop (ASP) is affected by CVE-2005-1622: Cross-site scripting in productsByCategory.asp allows remote attackers to inject arbitrary script/HTML via strCatalog_NAME. Root cause: insufficient input validation. Impact: integrity only (PARTIAL), no confidentiality/availability impact per t...
MetaCart E-Shop - 'ProductsByCategory.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/13639/info MetaCart e-Shop is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...
MetaCart E-Shop - ProductsByCategory.asp Cross-Site Scripting
MetaCart E-Shop - ProductsByCategory.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/13639/info MetaCart e-Shop is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...
CVE-2005-1361
Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the 1 intProdID parameter in product.asp or 2 strCatalogNAME parameter to productsByCategory.asp...
CVE-2005-1361
CVE-2005-1361 describes multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 (ASP) that allow remote attackers to execute arbitrary SQL via the parameters intProdID (in product.asp) or strCatalog_NAME (in productsByCategory.asp). The vulnerability affects the remote web application’s dat...
CVE-2005-1361
Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the 1 intProdID parameter in product.asp or 2 strCatalogNAME parameter to productsByCategory.asp...
MetaCart E-Shop V-8 - 'StrCatalog_NAME' SQL Injection
source: https://www.securityfocus.com/bid/13377/info An SQL injection vulnerability affects MetaCart e-Shop V-8. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may exploit this issue to manipulate SQL...