CVE-2006-5959

The CVE-2006-5959 vulnerability is an SQL injection in browse.asp of A+ Store E-Commerce, exploitable via the ParentID parameter to allow remote execution of arbitrary SQL commands. Vulnerable component: browse.asp; vulnerability type: SQL injection; impact per sources: unauthorized data access/m...

CVE-2006-5960

CVE-2006-5960 concerns XSS vulnerabilities in A+ Store E-Commerce, specifically in account_login.asp. The issue allows remote attackers to inject arbitrary script/HTML via the username (txtUserName) and password (txtPassword) parameters. The vulnerability affects the login page’s input handling a...