Show filters
32 Total Results
Displaying 31-32 of 32
Sort by:
Attacker Value
Unknown
CVE-2007-5261
Disclosure Date: October 06, 2007 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2) ddlCategory parameter to search.php.
0
Attacker Value
Unknown
CVE-2005-4161
Disclosure Date: December 11, 2005 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect script allow remote attackers to inject arbitrary web script or HTML via the domainname parameter to register.php, and other unspecified vectors. NOTE: the vendor has disputed this issue, stating "No invalid input can reach the script.
0
