EUVD-2004-0305

Malware in sbrugna...

EUVD-2004-0304

Malware in sbrugna...

webcortex.com Cross Site Scripting vulnerability OBB-2371146

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webcortex.com Cross Site Scripting vulnerability OBB-2308087

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webcortex.com XSS vulnerability

Vulnerable URL:...

webcortex.com XSS vulnerability

Open Bug Bounty ID: OBB-206837 Description| Value ---|--- Affected Website:| webcortex.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2004-0304

SQL injection vulnerability in browseitems.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the SearchText parameter...

CVE-2004-0305

Cross-site scripting XSS vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Messageid parameter...

CVE-2004-0304

The CVE maps to WebStores 2000 (WebCortex WebStores 2000 6.0). A SQL injection vulnerability in browse_items.asp (and related details via browse_item_details.asp) allows remote attackers to manipulate the backend database through the Search_Text parameter, potentially enabling unauthorized access...

CVE-2004-0305

Cross-site scripting XSS vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Messageid parameter...

CVE-2004-0304

SQL injection vulnerability in browseitems.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the SearchText parameter...

CVE-2004-0305

CVE-2004-0305 describes a cross-site scripting (XSS) vulnerability in WebCortex WebStores 2000 version 6.0, specifically in error.asp. The underlying issue is the handling of the Message_id parameter, enabling remote attackers to execute arbitrary scripts in the context of other users’ sessions a...

Adv-20040218.txt

S-Quadra Advisory 2004-02-18 Topic: WebCortex Webstores2000 version 6.0 multiple security vulnerabilities Severity: High Vendor URL: http://www.webcortex.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040218.txt Release date: 18 Feb 2004 1. DESCRIPTION Webstores2000 is a complete...

WebCortex Webstores2000 version 6.0 multiple security vulnerabilities

S-Quadra Advisory 2004-02-18 Topic: WebCortex Webstores2000 version 6.0 multiple security vulnerabilities Severity: High Vendor URL: http://www.webcortex.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040218.txt Release date: 18 Feb 2004 1. DESCRIPTION Webstores2000 is a complete...