4 matches found
CVE-2005-4283
Cross-site scripting XSS vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via parameters to the search module, possibly SKey to store.cgi...
CVE-2005-4283
CVE-2005-4283 is an XSS vulnerability in The CITY Shop 1.3 and earlier. Remote attackers can inject arbitrary script/HTML via parameters to the search module (possibly store.cgi). The NVD entry assigns a CVSS v2 base score of 4.3 (Medium), with network attack vector, no authentication, and partia...
CVE-2005-4283: Undefined Security Weakness
Cross-site scripting XSS vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via parameters to the search module, possibly SKey to store.cgi...
CVE-2001-0305: Undefined Security Weakness
Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. dot dot in the StartID parameter...