CVE-2006-6153

Multiple cross-site scripting XSS vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via 1 catname parameter to cat.asp or the 2 minprice parameter to search.asp...

CVE-2006-6153

CVE-2006-6153 affects the vSpin.net Classified System 2004. The vulnerability consists of multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) catname in cat.asp and (2) minprice in search.asp. The underlyin...

CVE-2006-6152: Undefined Security Weakness

Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to a cat.asp, or the 2 keyword, 3 order, 4 sort, 5 menuSelect, or 6 state parameter to b search.asp...

CVE-2006-6153: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via 1 catname parameter to cat.asp or the 2 minprice parameter to search.asp...