CVE-2006-6152

The CVE-2006-6152 issue affects vSpin.net Classified System 2004. Affected component: two ASP endpoints, cat.asp and search.asp. Vulnerability: multiple SQL injection vectors via parameters (cat on cat.asp; keyword, order, sort, menuSelect, state on search.asp). Impact: allows remote attackers to...

CVE-2006-6153

CVE-2006-6153 affects the vSpin.net Classified System 2004. The vulnerability consists of multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) catname in cat.asp and (2) minprice in search.asp. The underlyin...