Vulnerabilities

TI-2006-05740 CVE-2006-5958 · GHSA-wc6m-5j5p-6g83

Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password fields in (a) login.asp, (3) search field in (b) searc…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02149 Published 2006-11-17 No fix listed

TI-2006-05739 CVE-2006-5957 · GHSA-3rpf-v574-x42r

Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (1) groupid parameter in (a) browse_group.asp, (2) productid parameter in (b) added_to_cart.asp, and (…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01196 Published 2006-11-17 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers…

Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute…