Search
Find a vulnerability
Search criteria
8 vulnerabilities by oneworldstore
CVE-2005-1161 (GCVE-0-2005-1161)
Vulnerability from nvd – Published: 2005-04-18 04:00 – Updated: 2024-08-07 21:44
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1013720 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/13183 | vdb-entryx_refsource_BID |
| http://www.oneworldstore.com/support_security_iss… | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/13182 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/15518 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/15520 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/13181 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/15519 | vdb-entryx_refsource_OSVDB |
| http://marc.info/?l=bugtraq&m=111352017704126&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/14969 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2005-04-14 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T21:44:05.295Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1013720",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1013720"
},
{
"name": "13183",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13183"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"
},
{
"name": "13182",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13182"
},
{
"name": "15518",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15518"
},
{
"name": "15520",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15520"
},
{
"name": "oneworldstore-product-category-sql-injection(20097)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20097"
},
{
"name": "13181",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13181"
},
{
"name": "15519",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15519"
},
{
"name": "20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=111352017704126\u0026w=2"
},
{
"name": "14969",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/14969"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-04-14T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1013720",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1013720"
},
{
"name": "13183",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13183"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"
},
{
"name": "13182",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13182"
},
{
"name": "15518",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15518"
},
{
"name": "15520",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15520"
},
{
"name": "oneworldstore-product-category-sql-injection(20097)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20097"
},
{
"name": "13181",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13181"
},
{
"name": "15519",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15519"
},
{
"name": "20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=111352017704126\u0026w=2"
},
{
"name": "14969",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/14969"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-1161",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1013720",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1013720"
},
{
"name": "13183",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13183"
},
{
"name": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab",
"refsource": "CONFIRM",
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"
},
{
"name": "13182",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13182"
},
{
"name": "15518",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15518"
},
{
"name": "15520",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15520"
},
{
"name": "oneworldstore-product-category-sql-injection(20097)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20097"
},
{
"name": "13181",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13181"
},
{
"name": "15519",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15519"
},
{
"name": "20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=111352017704126\u0026w=2"
},
{
"name": "14969",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/14969"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-1161",
"datePublished": "2005-04-18T04:00:00.000Z",
"dateReserved": "2005-04-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T21:44:05.295Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-1328 (GCVE-0-2005-1328)
Vulnerability from nvd – Published: 2005-04-27 04:00 – Updated: 2024-08-07 21:44
VLAI
EPSS
VEX
Summary
OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1013782 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/13322 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/15724 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/15057 | third-party-advisoryx_refsource_SECUNIA |
| http://www.oneworldstore.com/support_security_iss… | x_refsource_CONFIRM |
| http://lostmon.blogspot.com/2005/04/oneworldstore… | x_refsource_MISC |
Date Public
2005-04-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T21:44:06.452Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1013782",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1013782"
},
{
"name": "13322",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13322"
},
{
"name": "15724",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15724"
},
{
"name": "15057",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/15057"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-04-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-06-15T16:37:43.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1013782",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1013782"
},
{
"name": "13322",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13322"
},
{
"name": "15724",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15724"
},
{
"name": "15057",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/15057"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-1328",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1013782",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1013782"
},
{
"name": "13322",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13322"
},
{
"name": "15724",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15724"
},
{
"name": "15057",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/15057"
},
{
"name": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon",
"refsource": "CONFIRM",
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon"
},
{
"name": "http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html",
"refsource": "MISC",
"url": "http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-1328",
"datePublished": "2005-04-27T04:00:00.000Z",
"dateReserved": "2005-04-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T21:44:06.452Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-1329 (GCVE-0-2005-1329)
Vulnerability from nvd – Published: 2005-04-27 04:00 – Updated: 2024-08-07 21:44
VLAI
EPSS
VEX
Summary
owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1013796 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/13361 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/15104 | third-party-advisoryx_refsource_SECUNIA |
| http://www.osvdb.org/15781 | vdb-entryx_refsource_OSVDB |
| http://www.oneworldstore.com/support_security_iss… | x_refsource_CONFIRM |
| http://lostmon.blogspot.com/2005/04/oneworldstore… | x_refsource_MISC |
Date Public
2005-04-25 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T21:44:06.422Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1013796",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1013796"
},
{
"name": "13361",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13361"
},
{
"name": "15104",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/15104"
},
{
"name": "15781",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15781"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-04-25T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-06-15T16:41:25.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1013796",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1013796"
},
{
"name": "13361",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13361"
},
{
"name": "15104",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/15104"
},
{
"name": "15781",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15781"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-1329",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1013796",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1013796"
},
{
"name": "13361",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13361"
},
{
"name": "15104",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/15104"
},
{
"name": "15781",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15781"
},
{
"name": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon",
"refsource": "CONFIRM",
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon"
},
{
"name": "http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html",
"refsource": "MISC",
"url": "http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-1329",
"datePublished": "2005-04-27T04:00:00.000Z",
"dateReserved": "2005-04-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T21:44:06.422Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-1162 (GCVE-0-2005-1162)
Vulnerability from nvd – Published: 2005-04-18 04:00 – Updated: 2024-08-07 21:44
VLAI
EPSS
VEX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/13184 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1013720 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/15523 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/13186 | vdb-entryx_refsource_BID |
| http://www.oneworldstore.com/support_security_iss… | x_refsource_CONFIRM |
| http://www.osvdb.org/15521 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://marc.info/?l=bugtraq&m=111352017704126&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://www.osvdb.org/15522 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/14969 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/13185 | vdb-entryx_refsource_BID |
Date Public
2005-04-14 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T21:44:05.390Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "13184",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13184"
},
{
"name": "1013720",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1013720"
},
{
"name": "15523",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15523"
},
{
"name": "13186",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13186"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"
},
{
"name": "15521",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15521"
},
{
"name": "oneworldstore-xss(20096)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20096"
},
{
"name": "20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=111352017704126\u0026w=2"
},
{
"name": "15522",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15522"
},
{
"name": "14969",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/14969"
},
{
"name": "13185",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13185"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-04-14T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "13184",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13184"
},
{
"name": "1013720",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1013720"
},
{
"name": "15523",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15523"
},
{
"name": "13186",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13186"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"
},
{
"name": "15521",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15521"
},
{
"name": "oneworldstore-xss(20096)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20096"
},
{
"name": "20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=111352017704126\u0026w=2"
},
{
"name": "15522",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15522"
},
{
"name": "14969",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/14969"
},
{
"name": "13185",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13185"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-1162",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "13184",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13184"
},
{
"name": "1013720",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1013720"
},
{
"name": "15523",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15523"
},
{
"name": "13186",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13186"
},
{
"name": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab",
"refsource": "CONFIRM",
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"
},
{
"name": "15521",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15521"
},
{
"name": "oneworldstore-xss(20096)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20096"
},
{
"name": "20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=111352017704126\u0026w=2"
},
{
"name": "15522",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15522"
},
{
"name": "14969",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/14969"
},
{
"name": "13185",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13185"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-1162",
"datePublished": "2005-04-18T04:00:00.000Z",
"dateReserved": "2005-04-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T21:44:05.390Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-1328 (GCVE-0-2005-1328)
Vulnerability from cvelistv5 – Published: 2005-04-27 04:00 – Updated: 2024-08-07 21:44
VLAI
EPSS
VEX
Summary
OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1013782 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/13322 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/15724 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/15057 | third-party-advisoryx_refsource_SECUNIA |
| http://www.oneworldstore.com/support_security_iss… | x_refsource_CONFIRM |
| http://lostmon.blogspot.com/2005/04/oneworldstore… | x_refsource_MISC |
Date Public
2005-04-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T21:44:06.452Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1013782",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1013782"
},
{
"name": "13322",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13322"
},
{
"name": "15724",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15724"
},
{
"name": "15057",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/15057"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-04-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-06-15T16:37:43.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1013782",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1013782"
},
{
"name": "13322",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13322"
},
{
"name": "15724",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15724"
},
{
"name": "15057",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/15057"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-1328",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1013782",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1013782"
},
{
"name": "13322",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13322"
},
{
"name": "15724",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15724"
},
{
"name": "15057",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/15057"
},
{
"name": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon",
"refsource": "CONFIRM",
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon"
},
{
"name": "http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html",
"refsource": "MISC",
"url": "http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-1328",
"datePublished": "2005-04-27T04:00:00.000Z",
"dateReserved": "2005-04-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T21:44:06.452Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-1329 (GCVE-0-2005-1329)
Vulnerability from cvelistv5 – Published: 2005-04-27 04:00 – Updated: 2024-08-07 21:44
VLAI
EPSS
VEX
Summary
owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1013796 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/13361 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/15104 | third-party-advisoryx_refsource_SECUNIA |
| http://www.osvdb.org/15781 | vdb-entryx_refsource_OSVDB |
| http://www.oneworldstore.com/support_security_iss… | x_refsource_CONFIRM |
| http://lostmon.blogspot.com/2005/04/oneworldstore… | x_refsource_MISC |
Date Public
2005-04-25 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T21:44:06.422Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1013796",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1013796"
},
{
"name": "13361",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13361"
},
{
"name": "15104",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/15104"
},
{
"name": "15781",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15781"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-04-25T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-06-15T16:41:25.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1013796",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1013796"
},
{
"name": "13361",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13361"
},
{
"name": "15104",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/15104"
},
{
"name": "15781",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15781"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-1329",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1013796",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1013796"
},
{
"name": "13361",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13361"
},
{
"name": "15104",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/15104"
},
{
"name": "15781",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15781"
},
{
"name": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon",
"refsource": "CONFIRM",
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon"
},
{
"name": "http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html",
"refsource": "MISC",
"url": "http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-1329",
"datePublished": "2005-04-27T04:00:00.000Z",
"dateReserved": "2005-04-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T21:44:06.422Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-1161 (GCVE-0-2005-1161)
Vulnerability from cvelistv5 – Published: 2005-04-18 04:00 – Updated: 2024-08-07 21:44
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1013720 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/13183 | vdb-entryx_refsource_BID |
| http://www.oneworldstore.com/support_security_iss… | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/13182 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/15518 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/15520 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/13181 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/15519 | vdb-entryx_refsource_OSVDB |
| http://marc.info/?l=bugtraq&m=111352017704126&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/14969 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2005-04-14 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T21:44:05.295Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1013720",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1013720"
},
{
"name": "13183",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13183"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"
},
{
"name": "13182",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13182"
},
{
"name": "15518",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15518"
},
{
"name": "15520",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15520"
},
{
"name": "oneworldstore-product-category-sql-injection(20097)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20097"
},
{
"name": "13181",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13181"
},
{
"name": "15519",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15519"
},
{
"name": "20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=111352017704126\u0026w=2"
},
{
"name": "14969",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/14969"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-04-14T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1013720",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1013720"
},
{
"name": "13183",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13183"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"
},
{
"name": "13182",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13182"
},
{
"name": "15518",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15518"
},
{
"name": "15520",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15520"
},
{
"name": "oneworldstore-product-category-sql-injection(20097)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20097"
},
{
"name": "13181",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13181"
},
{
"name": "15519",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15519"
},
{
"name": "20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=111352017704126\u0026w=2"
},
{
"name": "14969",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/14969"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-1161",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1013720",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1013720"
},
{
"name": "13183",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13183"
},
{
"name": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab",
"refsource": "CONFIRM",
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"
},
{
"name": "13182",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13182"
},
{
"name": "15518",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15518"
},
{
"name": "15520",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15520"
},
{
"name": "oneworldstore-product-category-sql-injection(20097)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20097"
},
{
"name": "13181",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13181"
},
{
"name": "15519",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15519"
},
{
"name": "20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=111352017704126\u0026w=2"
},
{
"name": "14969",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/14969"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-1161",
"datePublished": "2005-04-18T04:00:00.000Z",
"dateReserved": "2005-04-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T21:44:05.295Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-1162 (GCVE-0-2005-1162)
Vulnerability from cvelistv5 – Published: 2005-04-18 04:00 – Updated: 2024-08-07 21:44
VLAI
EPSS
VEX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/13184 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1013720 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/15523 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/13186 | vdb-entryx_refsource_BID |
| http://www.oneworldstore.com/support_security_iss… | x_refsource_CONFIRM |
| http://www.osvdb.org/15521 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://marc.info/?l=bugtraq&m=111352017704126&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://www.osvdb.org/15522 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/14969 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/13185 | vdb-entryx_refsource_BID |
Date Public
2005-04-14 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T21:44:05.390Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "13184",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13184"
},
{
"name": "1013720",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1013720"
},
{
"name": "15523",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15523"
},
{
"name": "13186",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13186"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"
},
{
"name": "15521",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15521"
},
{
"name": "oneworldstore-xss(20096)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20096"
},
{
"name": "20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=111352017704126\u0026w=2"
},
{
"name": "15522",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15522"
},
{
"name": "14969",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/14969"
},
{
"name": "13185",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13185"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-04-14T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "13184",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13184"
},
{
"name": "1013720",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1013720"
},
{
"name": "15523",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15523"
},
{
"name": "13186",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13186"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"
},
{
"name": "15521",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15521"
},
{
"name": "oneworldstore-xss(20096)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20096"
},
{
"name": "20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=111352017704126\u0026w=2"
},
{
"name": "15522",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15522"
},
{
"name": "14969",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/14969"
},
{
"name": "13185",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13185"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-1162",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "13184",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13184"
},
{
"name": "1013720",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1013720"
},
{
"name": "15523",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15523"
},
{
"name": "13186",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13186"
},
{
"name": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab",
"refsource": "CONFIRM",
"url": "http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"
},
{
"name": "15521",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15521"
},
{
"name": "oneworldstore-xss(20096)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20096"
},
{
"name": "20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=111352017704126\u0026w=2"
},
{
"name": "15522",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15522"
},
{
"name": "14969",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/14969"
},
{
"name": "13185",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13185"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-1162",
"datePublished": "2005-04-18T04:00:00.000Z",
"dateReserved": "2005-04-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T21:44:05.390Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}