CVE-2006-2178
Published May 4, 2006Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to login.asp, (2) P…
Vendor archive
smartwin_technology CVEs
Beta · best-effort4 CVEs tagged to vendor smartwin_technology — 0 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2006-2179
Published May 4, 2006Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameter to login.asp or (2) ProductIndex para…
CVE-2000-0925
Published Dec 19, 2000The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to…
CVE-2000-0926
Published Dec 19, 2000SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.
Showing 1-4 of 4 CVEsPage 1 of 1