34 matches found
CVE-2008-2918
SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3...
CVE-2008-2918
SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3...
Sql injection
SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a details action...
CVE-2008-2411
SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a details action...
CVE-2007-2674
SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter...
Sql injection
SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter...
CVE-2007-2674
The provided records describe a concrete vulnerability: SQL injection in Pre Shopping Mall 1.0, specifically in detail.php via the prodid parameter. This allows remote attackers to execute arbitrary SQL commands against the application's database. Relevant details from multiple sources confirm th...
CVE-2007-2674
SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter...
Pre Shopping Mall 1.0 Remote SQL Injection Vulnerability
No description provided by source. ============================================== Pre Shopping Mall v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Exploit:...
Pre Shopping Mall 1.0 Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================== Pre Shopping Mall 1.0 Remote SQL Injection Vulnerability ======================================================== ============================================== Pre Shopping Mall v1....
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter in search.php the "search box", 2 the prodid parameter in detail.php, and the 3 cid parameter in products.php...
CVE-2006-2669
Multiple cross-site scripting XSS vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter in search.php the "search box", 2 the prodid parameter in detail.php, and the 3 cid parameter in products.php...
CVE-2006-2669
Multiple cross-site scripting XSS vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter in search.php the "search box", 2 the prodid parameter in detail.php, and the 3 cid parameter in products.php...
Sql injection
Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the OrderID parameter in a shipping.cfm and b checkout.cfm, 2 ItemID parameter in c proddetail.cfm, 3 SubCatID parameter in d index.cfm, the 4 CategoryID parameter ...