CVE-2008-4746

CVE-2008-4746 affects Uniwin eCart Professional 2.0.17. The vulnerability consists of multiple SQL injection flaws exploitable via unspecified vectors to the pages search.asp and cartUtil.asp , enabling remote attackers to run arbitrary SQL commands. The root cause is improper input handling lead...

CVE-2008-0558

CVE-2008-0558 describes a cross-site scripting (XSS) vulnerability in Uniwin eCart Professional prior to 2.0.16. The issue allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and potentially other components. The root cause is not explicitly detaile...

CVE-2008-4745

CVE-2008-4745 is an XSS vulnerability in Uniwin eCart Professional 2.0.17, specifically in emailFriend.asp. Remote attackers can inject arbitrary web script or HTML via unspecified vectors. The NVD entry lists a base score of 4.3 (Medium) with Network attack vector, Medium complexity, no authenti...