CVE-2005-3735

Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the 1 productid parameter in shopaddtocart.asp, 2 strpemail parameter in shopprojectlogin.asp, and 3 id parameter in shoptellafriend.asp...

CVE-2005-3736

Multiple cross-site scripting XSS vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the 1 strgifttoname parameter in shopgift.asp, 2 strfirstname parameter in shopmaillist.asp, 3 strpid parameter in shopprojectlogin.asp, and 4 Custname parameter in...

CVE-2005-3736: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the 1 strgifttoname parameter in shopgift.asp, 2 strfirstname parameter in shopmaillist.asp, 3 strpid parameter in shopprojectlogin.asp, and 4 Custname parameter in...

CVE-2005-3735

Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the 1 productid parameter in shopaddtocart.asp, 2 strpemail parameter in shopprojectlogin.asp, and 3 id parameter in shoptellafriend.asp...

CVE-2005-3735: Undefined Security Weakness

Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the 1 productid parameter in shopaddtocart.asp, 2 strpemail parameter in shopprojectlogin.asp, and 3 id parameter in shoptellafriend.asp...

CVE-2005-3735

CVE-2005-3735 involves multiple SQL injection vulnerabilities in the e-Quick Cart system. The affected components/parameters are: (1) productid in shopaddtocart.asp, (2) strpemail in shopprojectlogin.asp, and (3) id in shoptellafriend.asp. The underlying issue is unsafely constructed SQL queries ...

CVE-2005-3736

CVE-2005-3736 refers to multiple XSS vulnerabilities in the e-Quick Cart application. The disclosed vectors involve user-supplied input parameters: strgifttoname in shopgift.asp, strfirstname in shopmaillist.asp, strpid in shopprojectlogin.asp, and Custname in shoptellafriend.asp. These allow rem...

CVE-2005-3736

Multiple cross-site scripting XSS vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the 1 strgifttoname parameter in shopgift.asp, 2 strfirstname parameter in shopmaillist.asp, 3 strpid parameter in shopprojectlogin.asp, and 4 Custname parameter in...

[SA17652] e-Quick Cart SQL Injection Vulnerabilities

TITLE: e-Quick Cart SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17652 VERIFY ADVISORY: http://secunia.com/advisories/17652/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: e-Quick Cart http://secunia.com/product/6165/ DESCRIPTION: BiPiHaCk has...

eQuickSQLXSS.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 016 ------------------------------------------------------ Date - 11/2005 e-Quick Cart Sql & Xss AFFECTED PRODUCTS ================= e-Quick Cart http://www.cdmweb.com Xss Poof: ========...

CVE-2005-3231

Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3231

Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3231

CAT Quick Heal is affected by a vulnerability described as a multiple interpretation error in unspecified versions, allowing remote attackers to bypass virus detection. The attack involves a malicious executable contained in a specially crafted RAR file with malformed central and local headers, w...

CVE-2005-3231: Undefined Security Weakness

Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2004-2310

Cross-site scripting XSS vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console...

CVE-2004-2310

The CVE-2004-2310 entry concerns Lotus Domino R6 6.5.1, specifically the webadmin.nsf component, which is vulnerable to Cross-site Scripting (XSS). The vulnerability arises from accepting a Domino command via the Quick Console, enabling remote attackers to inject arbitrary web script/HTML. Accord...

CVE-2004-2310: Undefined Security Weakness

Cross-site scripting XSS vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console...

CVE-2005-2479

CVE-2005-2479 affects Quick 'n Easy FTP Server 3.0. The OpenVAS entry and CVE references confirm a denial-of-service via a long USER command, enabling remote attackers to crash the application or cause CPU exhaustion. No vendor/version remediation or workaround is documented in the provided mater...

quickDoS.txt

Details: ======== Input to the user commands is not properly checked and/or filtered. Issuing a long argument to the user about 1024 caracteres commands will cause the corresponding process to die without any error message. this vulnerabilities exist in both the professionnal version 3.0 and lite...

CVE-2005-2479: Undefined Security Weakness

Quick 'n Easy FTP Server 3.0 allows remote attackers to cause a denial of service application crash or CPU consumption via a long USER command...