EUVD-2008-4725

Malware in sbrugna...

EUVD-2008-4726

Malware in sbrugna...

EUVD-2008-0568

Malware in sbrugna...

CVE-2008-0558

Cross-site scripting XSS vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2008-4745

Cross-site scripting XSS vulnerability in emailFriend.asp in Uniwin eCart Professional 2.0.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4746

Multiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to 1 search.asp and 2 cartUtil.asp...

Sql injection

Multiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to 1 search.asp and 2 cartUtil.asp...

Cross site scripting

Cross-site scripting XSS vulnerability in emailFriend.asp in Uniwin eCart Professional 2.0.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4746

CVE-2008-4746 affects Uniwin eCart Professional 2.0.17. The vulnerability consists of multiple SQL injection flaws exploitable via unspecified vectors to the pages search.asp and cartUtil.asp , enabling remote attackers to run arbitrary SQL commands. The root cause is improper input handling lead...

CVE-2008-4745

Cross-site scripting XSS vulnerability in emailFriend.asp in Uniwin eCart Professional 2.0.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4746

Multiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to 1 search.asp and 2 cartUtil.asp...

CVE-2008-4745

CVE-2008-4745 is an XSS vulnerability in Uniwin eCart Professional 2.0.17, specifically in emailFriend.asp. Remote attackers can inject arbitrary web script or HTML via unspecified vectors. The NVD entry lists a base score of 4.3 (Medium) with Network attack vector, Medium complexity, no authenti...

CVE-2008-0558

Cross-site scripting XSS vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained...

Cross site scripting

Cross-site scripting XSS vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2008-0558

CVE-2008-0558 describes a cross-site scripting (XSS) vulnerability in Uniwin eCart Professional prior to 2.0.16. The issue allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and potentially other components. The root cause is not explicitly detaile...

CVE-2008-0558

Cross-site scripting XSS vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained...