CVE-2012-1246

CVE-2012-1246 describes a cross-site scripting (XSS) vulnerability in WEB MART from KENT-WEB. The issue affects WEB MART versions 1.7 and earlier and arises from how cookies are handled, allowing an attacker to inject arbitrary web script or HTML via a crafted cookie. Reported impact is that an a...

CVE-2012-1247

The CVE-2012-1247 entry concerns KENT-WEB WEB MART, affected in versions 1.7 and earlier. The underlying issue is a cross-site scripting (XSS) vulnerability triggered when using Internet Explorer, exploiting CSS expressions to inject arbitrary script/HTML. Impact is script execution in the user’s...