12 matches found
EUVD-2004-0350
Malware in sbrugna...
EUVD-2004-0348
Malware in sbrugna...
SpiderSales 2.0 Shopping Cart Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9799/info Multiple vulnerabilities have been identified in the application that may allow an attacker to obtain the private cryptographic key and gain access to sensitive information. The application is also reported pron...
CVE-2004-0348
SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter...
CVE-2004-0350
SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring...
CVE-2004-0348
SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter...
CVE-2004-0350
SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring...
CVE-2004-0350
The CVE-2004-0350 entry affects the SpiderSales shopping cart, which does not enforce a minimum length for the private key. This weakens key material quality and can let local users obtain the private key by factoring, with an in‑the‑wild risk limited by local access and a low base score (2.1). T...
CVE-2004-0348
CVE-2004-0348 pertains to SpiderSales Shopping Cart software, affecting the viewCart.asp component. The root cause is an SQL injection via the userId parameter, enabling a remote attacker to execute arbitrary SQL statements with full impact on confidentiality, integrity, and availability (CVSS v2...
SpiderSales Shopping Cart SQL injection
The remote host is running the SpiderSales Shopping Cart CGI suite. There is a bug in this suite which may allow an attacker to force it to execute arbitrary SQL statements on the remote host. An attacker may use this flaw to gain the control of the remote website and possibly execute arbitrary...
SpiderSales 2.0 Shopping Cart - Multiple Vulnerabilities
SpiderSales 2.0 Shopping Cart - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/9799/info Multiple vulnerabilities have been identified in the application that may allow an attacker to obtain the private cryptographic key and gain access to sensitive information. The applicatio...
SpiderSales 2.0 Shopping Cart - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/9799/info Multiple vulnerabilities have been identified in the application that may allow an attacker to obtain the private cryptographic key and gain access to sensitive information. The application is also reported prone to an SQL injection vulnerabilit...