2it2.com XSS vulnerability

Vulnerable URL: http://www.2it2.com/Product.asp?StrangeNew=1"...

feelgooddesigns.com XSS vulnerability

Open Bug Bounty ID: OBB-258345 Description| Value ---|--- Affected Website:| feelgooddesigns.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

paros-antiques.co.uk XSS vulnerability

Vulnerable URL: http://www.paros-antiques.co.uk/product.asp?strParents=%22/%3E%3Csvg/onload=alert%28%27XSSPOSED%27%29%3EID=32ID=511 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:00 GMT Vulnerability type:| XSS Vulnerability status:| Public...

Sql injection

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

CVE-2013-7216: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

PT-2013-6296

Name of the Vulnerable Software and Affected Versions Classifieds Creator version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ID parameter to "demo/classifieds/product.asp", or the UserID or Password field to...

CVE-2006-6111: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 productid parameter in product.asp or 2 search parameter in search.asp. NOTE: the category.asp vector is already covered by CVE-2004-1873...

CVE-2006-5991: Undefined Security Weakness

Multiple SQL injection vulnerabilities in wwweb concepts CactuShop allow remote attackers to execute arbitrary SQL commands via the 1 prodtype parameter in prodtype.asp and the 2 product parameter in product.asp...

CVE-2005-1362: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the 1 intProdID parameter to product.asp, 2 intCatalogID or 3 strSubCatalogID parameters to productsByCategory.asp, 4 chkText, 5 strText, 6 chkPrice, 7 intPrice, 8 chkCat...

CVE-2005-1363: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via 1 intCatalogID, 2 strSubCatalogID, or 3 strSubCatalogNAME parameter to productsByCategory.asp, 4 curCatalogID, 5 strSubCatalogNAME, 6 intCatalogID, or 7 page parameter to...

CVE-2005-1361: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the 1 intProdID parameter in product.asp or 2 strCatalogNAME parameter to productsByCategory.asp...