Vulnerabilities > CVE-2007-0056 - Unspecified vulnerability in Ashopsoftware Ashop Administration Panel and Ashop Deluxe

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
ashopsoftware
exploit available
NVD
Published: 2007-01-04
Updated: 2024-11-21

Summary

Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to (a) ashop/catalogue.php and (b) ashop/basket.php, the (2) exp parameter to ashop/catalogue.php, the (3) searchstring parameter to (c) ashop/search.php, the (4) checkout and (5) action parameters to (d) ashop/shipping.php, the cat parameter to (f) cart-path/admin/editcatalogue.php, and the (7) resultpage parameter to (g) cart-path/admin/salesadmin.php.

Vulnerable Configurations

Part Description Count
Application
Ashopsoftware
2

Exploit-Db

  • descriptionAShop Deluxe 4.5 admin/salesadmin.php resultpage Parameter XSS. CVE-2007-0056. Webapps exploit for php platform
    idEDB-ID:29382
    last seen2016-02-03
    modified2007-01-02
    published2007-01-02
    reporterHackers Center Security
    sourcehttps://www.exploit-db.com/download/29382/
    titleAShop Deluxe 4.5 admin/salesadmin.php resultpage Parameter XSS
  • descriptionAShop Deluxe 4.5 ashop/catalogue.php Multiple Parameter XSS. CVE-2007-0056. Webapps exploit for php platform
    idEDB-ID:29377
    last seen2016-02-03
    modified2007-01-02
    published2007-01-02
    reporterHackers Center Security
    sourcehttps://www.exploit-db.com/download/29377/
    titleAShop Deluxe 4.5 ashop/catalogue.php Multiple Parameter XSS
  • descriptionAShop Deluxe 4.5 shipping.php Multiple Parameter XSS. CVE-2007-0056. Webapps exploit for php platform
    idEDB-ID:29380
    last seen2016-02-03
    modified2007-01-02
    published2007-01-02
    reporterHackers Center Security
    sourcehttps://www.exploit-db.com/download/29380/
    titleAShop Deluxe 4.5 shipping.php Multiple Parameter XSS
  • descriptionAShop Deluxe 4.5 ashop/basket.php cat Parameter XSS. CVE-2007-0056. Webapps exploit for php platform
    idEDB-ID:29378
    last seen2016-02-03
    modified2007-01-02
    published2007-01-02
    reporterHackers Center Security
    sourcehttps://www.exploit-db.com/download/29378/
    titleAShop Deluxe 4.5 ashop/basket.php cat Parameter XSS
  • descriptionAShop Deluxe 4.5 ashop/search.php searchstring Parameter XSS. CVE-2007-0056. Webapps exploit for php platform
    idEDB-ID:29379
    last seen2016-02-03
    modified2007-01-02
    published2007-01-02
    reporterHackers Center Security
    sourcehttps://www.exploit-db.com/download/29379/
    titleAShop Deluxe 4.5 ashop/search.php searchstring Parameter XSS
  • descriptionAShop Deluxe 4.5 admin/editcatalogue.php cat Parameter XSS. CVE-2007-0056. Webapps exploit for php platform
    idEDB-ID:29381
    last seen2016-02-03
    modified2007-01-02
    published2007-01-02
    reporterHackers Center Security
    sourcehttps://www.exploit-db.com/download/29381/
    titleAShop Deluxe 4.5 admin/editcatalogue.php cat Parameter XSS

References