CVE-2005-1622

MetaCart e-Shop (ASP) is affected by CVE-2005-1622: Cross-site scripting in productsByCategory.asp allows remote attackers to inject arbitrary script/HTML via strCatalog_NAME. Root cause: insufficient input validation. Impact: integrity only (PARTIAL), no confidentiality/availability impact per t...

CVE-2005-1622: Undefined Security Weakness

Cross-site scripting XSS vulnerability in productsByCategory.asp in MetaCart e-Shop allows remote attackers to inject arbitrary web script or HTML via the strCatalogNAME parameter...

CVE-2005-1361: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the 1 intProdID parameter in product.asp or 2 strCatalogNAME parameter to productsByCategory.asp...