CVE-2004-1806

CFWebStore CFWebStore 5.0.x is vulnerable to SQL injection in index.cfm via the parameters category_id, product_id, or feature_id. The root cause is unsafe SQL construction, enabling remote attackers to run arbitrary SQL and potentially gain administrative access on affected hosts. The assessment...

CVE-2004-1807

CVE-2004-1807 describes a cross-site scripting (XSS) vulnerability in CFWebstore 5.0’s index.cfm that allows remote attackers to inject arbitrary script or HTML via the URL. The issue affects CFWebstore 5.0, with the root cause per the records being a client-side/script injection vulnerability in...