EUVD-2004-0301

Malware in sbrugna...

Ecommerce Corporation Online Store Kit 3.0 More.PHP id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/9676/info Multiple vulnerabilities have been identified in the software due to improper sanitization of user-supplied input. Successful exploitation of these issues could allow an attacker to carry out cross-site scriptin...

Ecommerce Corporation Online Store Kit 3.0 More.PHP XSS

No description provided by source. source: http://www.securityfocus.com/bid/9676/info Multiple vulnerabilities have been identified in the software due to improper sanitization of user-supplied input. Successful exploitation of these issues could allow an attacker to carry out cross-site scriptin...

PT-2012-1830

Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the course-tags functionality. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the...

runt-communications Design - property_more.php SQL Injection

runt-communications Design - propertymore.php SQL Injection ------------------------------------------------------------------------------------------- runt-communications Design propertymore.php SQL Injection Vulnerability...

CVE-2004-0301

CVE-2004-0301 is an XSS vulnerability in Online Store Kit 3.0, specifically in more.php via the id parameter. The root cause is insufficient input sanitization of the id value, allowing remote attackers to inject arbitrary HTML. Impact is described as partial confidentiality, integrity, and avail...

CVE-2004-0301: Undefined Security Weakness

Cross-site scripting XSS vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter...

CVE-2004-0300: Undefined Security Weakness

SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via 1 the cat parameter in shop.php, 2 the id parameter in more.php, 3 the catmanufacturer parameter in shopbybrand.php, or 4 the id parameter in listing.php...

eCommerce Corporation Online Store Kit 3.0 - 'More.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9676/info Multiple vulnerabilities have been identified in the software due to improper sanitization of user-supplied input. Successful exploitation of these issues could allow an attacker to carry out cross-site scripting and SQL injection attacks via th...