CVE-2006-3234

CVE-2006-3234 affects FineShop 3.0 and earlier. The vulnerability arises from multiple SQL injection flaws in index.php, exploitable via the parameters (1) produkt, (2) id_produc, and (3) id_kat, allowing remote attackers to execute arbitrary SQL commands. The sources consistently describe these ...

CVE-2006-3235

This CVE refers to multiple cross-site scripting (XSS) flaws in index.php of FineShop 3.0 and earlier. The vulnerabilities allow remote attackers to inject arbitrary script or HTML via the parameters (1) promocja, (2) wysw, or (3) id_produc. Affected product: FineShop 3.0 and earlier (web applica...