Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2006-2474
Disclosure Date: May 19, 2006 (last updated October 04, 2023)
SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier allows remote attackers to execute arbitrary SQL commands via the artnum parameter.
0
Attacker Value
Unknown
CVE-2006-2475
Disclosure Date: May 19, 2006 (last updated October 04, 2023)
Directory traversal vulnerability in (1) edit_mailtexte.cgi and (2) bestmail.cgi in Cosmoshop 8.11.106 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
0
Attacker Value
Unknown
CVE-2005-2786
Disclosure Date: September 02, 2005 (last updated February 22, 2025)
Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
0
Attacker Value
Unknown
CVE-2005-2784
Disclosure Date: September 02, 2005 (last updated February 22, 2025)
SQL injection vulnerability in the login function for the administration login panel in cosmoshop 8.10.78 allows remote attackers to execute arbitrary SQL commands and bypass authentication via unspecified vectors.
0
Attacker Value
Unknown
CVE-2005-2785
Disclosure Date: September 02, 2005 (last updated February 22, 2025)
cosmoshop 8.10.78 and earlier stores passwords in plaintext in the database, which allows local users to obtain sensitive information.
0
