CVE-2005-0606

Description

References

• lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html · Exploit
• secunia.com/advisories/14416
• securitytracker.com/id · Exploit
• cubecart.com/site/forums/index.php · Patch
• securityfocus.com/bid/12658 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/20637

Altre vulnerabilità di cubecart

• CVE-2007-2862ALTO 7.5Multiple SQL injection vulnerabilities in CubeCart 3.0.16 might allow remote attackers to execute arbitrary SQL commands via an unspecified …
• CVE-2007-2550MEDIO 5.0Multiple CRLF injection vulnerabilities in Devellion CubeCart 3.0.15 allow remote attackers to inject arbitrary HTTP headers and conduct HTT…
• CVE-2006-5109MEDIO 5.0Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for (1) link_navi.php or (2) spotlight…
• CVE-2006-5108MEDIO 6.8Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitrary web script or HTM…
• CVE-2006-5107ALTO 7.5Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL commands via (1) the user…