CVE-2006-5944

MGinternet Car Site Manager (CSM) is affected by an XSS vulnerability in csm/asp/listings.asp via the s parameter. The issue is documented across multiple sources identifying a cross-site scripting flaw in the API endpoint /csm/asp/listings.asp, which could allow remote attackers to inject arbitr...

CVE-2006-5945

The CVE-2006-5945 entry details multiple SQL injection flaws in MGinternet Car Site Manager (CSM). The vulnerability enables remote execution of arbitrary SQL commands via the p parameter to csm/asp/detail.asp and via the l, typ, or loc parameters to csm/asp/listings.asp. Connected sources corrob...

CVE-2006-6012

The CVE-2006-6012 entry describes a Cross-site scripting (XSS) vulnerability in MGinternet Car Site Manager (CSM), specifically in the file path csm/asp/listings.asp, exploitable via the p parameter. The affected component is the CSM web application; the underlying cause is improper handling of i...