EUVD-2006-4953

Malware in sbrugna...

NextAge Cart Index.PHP Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/20040/info NextAge Cart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

CVE-2006-4967

Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...

CVE-2006-4967

Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...

CVE-2006-4967

CVE-2006-4967 involves NextAge Cart with two XSS vectors: via the CatId parameter in the product category action and the SearchWd parameter in the index search action (index.php). The description indicates remote attackers can inject arbitrary script/HTML. No fixes or detailed remediation are pro...

[SA22030] NextAge Cart "CatId" and "SearchWd" Cross-Site Scripting

TITLE: NextAge Cart "CatId" and "SearchWd" Cross-Site Scripting SECUNIA ADVISORY ID: SA22030 VERIFY ADVISORY: http://secunia.com/advisories/22030/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Nextage Cart http://secunia.com/product/12037/ DESCRIPTION: meto5757...

NextAge Cart Cross-Site Scripting multiple Vulnerabilities

Vulnerable:NextAge Cart Cross-Site Scripting Vulnerability. Venedor site : http://www.nextagecart.com Critical Level : Dangerous Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks. Exploit :...

NextAge Cart - index.php Multiple Cross-Site Scripting Vulnerabilities

NextAge Cart - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20040/info NextAge Cart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

NextAge Cart - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20040/info NextAge Cart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch...