EUVD-2005-0995

Malware in sbrugna...

CVE-2005-0995

Multiple cross-site scripting XSS vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via 1 the keyword parameter to advSearchh.asp, 2 the redirectUrl parameter to NewCust.asp, 3 the country parameter to storelocatorsubmit.asp, or 4 the error parameter...

CVE-2005-0994

Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via 1 the Category or resultCnt parameters to advSearchh.asp, and possibly 2 the offset parameter to tarinasworldbutterflyjournal.asp. NOTE: it is possible that item 2 is the result ...

CVE-2005-0995

CVE-2005-0995 indicates multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7. Attackers can inject arbitrary script or HTML via four parameters: (1) keyword to advSearch_h.asp, (2) redirectUrl to NewCust.asp, (3) country to storelocator_submit.asp, and (4) error to techErr.asp. ...

CVE-2005-0994

Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via 1 the Category or resultCnt parameters to advSearchh.asp, and possibly 2 the offset parameter to tarinasworldbutterflyjournal.asp. NOTE: it is possible that item 2 is the result ...

CVE-2005-0994

CVE-2005-0994 : Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via the Category or resultCnt parameters to advSearch_h.asp, and possibly via the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: item (2) may be the res...