Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown
CVE-2024-27517
Disclosure Date: February 29, 2024 (last updated December 18, 2024)
Webasyst 2.9.9 has a Cross-Site Scripting (XSS) vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions.
0
Attacker Value
Unknown
CVE-2014-8377
Disclosure Date: October 21, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/.
0
Attacker Value
Unknown
CVE-2010-4859
Disclosure Date: October 05, 2011 (last updated October 04, 2023)
SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blog_id parameter in a news action.
0
Attacker Value
Unknown
CVE-2010-1462
Disclosure Date: April 16, 2010 (last updated October 04, 2023)
Directory traversal vulnerability in WebAsyst Shop-Script FREE has unknown impact and attack vectors via the sub parameter.
0
Attacker Value
Unknown
CVE-2010-1464
Disclosure Date: April 16, 2010 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote attackers to inject arbitrary web script or HTML via the (1) currency_id_left, (2) currency_id_right, (3) darkcolor, (4) lightcolor, (5) middlecolor, and (6) w parameters.
0
Attacker Value
Unknown
CVE-2010-1463
Disclosure Date: April 16, 2010 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in WebAsyst Shop-Script FREE allow attackers to execute arbitrary SQL commands via the (1) add2cart, (2) c_id, (3) categoryID, (4) list_price, (5) name, (6) new_offer, (7) price, (8) product_code, (9) productID, (10) rating, and (11) save_product parameters.
0
Attacker Value
Unknown
CVE-2007-1855
Disclosure Date: April 03, 2007 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in smarty/smarty_class.php in Shop-Script FREE allow remote attackers to execute arbitrary PHP code via a URL in the (1) _smarty_compile_path, (2) smarty_compile_path, (3) get_plugin_filepath, (4) smarty_dir, and (5) filename parameters. NOTE: this issue might be related to CVE-2006-7105.
0
Attacker Value
Unknown
CVE-2006-5566
Disclosure Date: October 27, 2006 (last updated October 04, 2023)
CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the (1) links_exchange, (2) news, (3) search_with_change_category_ability, (4) logging, (5) feedback, (6) show_price, (7) register, (8) answer, (9) productID, and (10) inside parameters.
0
