502 matches found
CVE-2007-2790
Cross-site scripting XSS vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the type parameter...
CVE-2007-2790
Cross-site scripting XSS vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the type parameter...
CVE-2007-2790: Undefined Security Weakness
Cross-site scripting XSS vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the type parameter...
CVE-2007-2790
VP-ASP Shopping Cart 6.50 (and possibly earlier) has a Cross-Site Scripting (XSS) vulnerability in shopcontent.asp, exploitable via the type parameter. The issue is described across multiple sources as a remote attacker can inject arbitrary web script/HTML by supplying a crafted type value, with ...
vpasp-xss.txt
VP-ASP Shopping Cart 6.50 - Cross-Site Scripting Vulnerability VP-ASP Shopping Cart 6.50 - Cross-Site Scripting Vulnerability discovered by John Martinelli of RedLevel Security Google d0rk: intitle:"VP-ASP Shopping Cart 6.50" file shopcontent.asp - variable type - method get "...
VP-ASP Shopping Cart 6.50 - ShopContent.asp Cross-Site Scripting
VP-ASP Shopping Cart 6.50 - ShopContent.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/24033/info VP-ASP Shopping Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue t...
VP-ASP Shopping Cart 6.50 - 'ShopContent.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24033/info VP-ASP Shopping Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...
Sql injection
SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginLastname parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2007-0224
SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginLastname parameter...
CVE-2007-0225
Cross-site scripting XSS vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2007-0225
The CVE-2007-0225 entry affects VP-ASP Shopping Cart (version 6.09 and earlier), specifically a Cross-Site Scripting (XSS) flaw in the ASP page shopcustadmin.asp. The vulnerability allows an attacker to inject arbitrary web script or HTML by supplying a payload in the msg parameter. This is a cli...
CVE-2007-0224
SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginLastname parameter...
CVE-2007-0224
CVE-2007-0224 affects VP-ASP Shopping Cart (version 6.09 and earlier) via the vulnerable endpoint in the file/component shopgiftregsearch.asp . The root cause is a SQL injection vulnerability that can be exploited through the LoginLastname parameter, enabling remote attackers to execute arbitrary...
CVE-2007-0225
Cross-site scripting XSS vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2007-0225: Undefined Security Weakness
Cross-site scripting XSS vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2007-0224: Undefined Security Weakness
SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginLastname parameter...
Title : VP-ASP Shopping Cart 6.09 Remote Multiple Vulnerabilities
Title : VP-ASP Shopping Cart 6.09 Remote Multiple Vulnerabilities Author : ajann Contact : : S.Page : http://www.vpasp.com $$ : $49.00 - $350.00 - $495.00 SQL--------------------------------------------------------- http://target/path//shopgiftregsearch.asp?LoginLastname=SQL Example:...
vp-asp shopping cart 6.09 - SQL Injection Cross-Site Scripting
vp-asp shopping cart 6.09 - SQL Injection Cross-Site Scripting Title : VP-ASP Shopping Cart 6.09 Remote Multiple Vulnerabilities Author : ajann Contact : : S.Page : http://www.vpasp.com $$ : $49.00 - $350.00 - $495.00 SQL---------------------------------------------------------...
VP-ASP Shopping Cart 6.09 (SQL/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== VP-ASP Shopping Cart 6.09 SQL/XSS Multiple Remote Vulnerabilities =================================================================== Title : VP-ASP Shopping Cart 6.09 Remo...