CVE-2008-3136

The CVE-2008-3136 entry concerns a SQL injection in AShop Deluxe 4.x. Affected software: AShop Deluxe (version family 4.x). Vulnerable component: catalogue.php, with exploitation via the cat parameter. Root cause: unsanitized input leading to arbitrary SQL execution. Impact: partial confidentiali...

CVE-2007-0056

CVE-2007-0056 covers multiple cross-site scripting (XSS) flaws in AShop Deluxe 4.5 and the AShop Administration Panel. The vulnerabilities allow remote attackers to inject arbitrary script/HTML through various inputs: cat in ashop/catalogue.php and ashop/basket.php; exp in ashop/catalogue.php; se...