PT-2018-14855

Name of the Vulnerable Software and Affected Versions XiaoCms version 20141229 Description An issue was discovered related to XSS in the template/default/show product.html file. Recommendations For XiaoCms version 20141229, consider restricting access to the template/default/show product.html fil...

CVE-2010-1744: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in product.html in B2B Gold Script allows remote attackers to execute arbitrary SQL commands via the id parameter...