26 matches found
CVE-2010-0725
Cross-site scripting XSS vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2010-0724
CVE-2010-0724 describes an SQL injection in Arab Cart 1.0.2.0, where an attacker can manipulate the id parameter in showimg.php to execute arbitrary SQL commands. The vulnerability is documented with a CVSSv2 base score of 7.5 (HIGH) and reflects a network-exposed, low-complexity vector without r...
CVE-2010-0725
CVE-2010-0725 describes a Cross-site scripting (XSS) vulnerability in Arab Cart 1.0.2.0. The flaw is in showimg.php and allows an attacker to inject arbitrary web script or HTML by manipulating the id parameter. The cited NVD entry shows a base score of 4.3 (Medium) under CVSS v2, with no confide...
CVE-2010-0724
SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-0725: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2010-0724: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...