CVE-2006-5958: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script or HTML via the 1 username and 2 password fields in a login.asp, 3 search field in b search.asp, and 4 email field in c sendpassword.asp...

CVE-2005-2063: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to sendpassword.asp or 2 Keyword field in search.asp...

CVE-2005-1029: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 SortDir, or 3 Sortby parameter to default.asp, 4 itemID parameter to ItemInfo.asp, or 5 Email field to sendpassword.asp...