CVE-2006-2649

In CosmicShoppingCart, the CosmicShop directory contains multiple XSS vulnerabilities in search.php, search_cat.php, search_price.php, and product_details.php. The flaws allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, demonstrated by the (1) query paramet...

CVE-2006-2650

The CVE-2006-2650 entry documents an SQL injection in CosmicShoppingCart, specifically in cosmicshop/search.php, exploitable via the max parameter. The vulnerability allows remote attackers to craft arbitrary SQL commands executed by the database. The affected component is the search functionalit...