CVE-2010-4632

ASPilot Pilot Cart 7.3 is affected by SQL injection vulnerabilities (CVE-2010-4632) in multiple input vectors. The description specifies four vulnerable parameters: article (to kb.asp), a parameter to cart.asp, countrycode (to contact.asp), and srch (to search.asp). The root cause is improper san...

CVE-2010-4872

CVE-2010-4872 affects ASPilot Pilot Cart 7.3, where the newsroom.asp component is vulnerable to SQL injection via a specific parameter. The root cause is improper handling/sanitization of user input, enabling remote attackers to execute arbitrary SQL commands. The vulnerability allows Confidentia...

CVE-2008-2688

ASPilot Pilot Cart 7.3 is affected by SQL injection via the article parameter (pilot.asp and kb.asp) that is used in SQL queries without proper sanitization, enabling remote arbitrary SQL execution. This CVE (CVE-2008-2688) covers the article parameter; related entries confirm the same issue acro...

CVE-2010-4631

ASPilot Pilot Cart 7.3 is affected by multiple XSS vulnerabilities. The issues enable injection of arbitrary web script/HTML via the following inputs: (1) countrycode in contact.asp, (2) USERNAME in gateway.asp, (3) USERNAME in cart.asp, and the specific parameter in quote.asp and buyitnow. The c...