Oneworldstore - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2005-05-02.

Products

• Oneworldstore - 4 CVEs

Newest CVEs of Oneworldstore

• CVE-2005-1162 - CVSS 5.8 (medium), 2005-05-02: Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail…
• CVE-2005-1161 - CVSS 7.5 (high), 2005-05-02: Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1)…
• CVE-2005-1329 - CVSS 5 (medium), 2005-05-02: owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter.
• CVE-2005-1328 - CVSS 5 (medium), 2005-05-02: OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp.