Webcortex » Webstores 2000 » 6.0 : Security Vulnerabilities, CVEs,
Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Message_id parameter.
Max CVSS
6.8
EPSS Score
0.56%
Published
2004-11-23
Updated
2017-07-11
SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the Search_Text parameter.
Max CVSS
10.0
EPSS Score
0.19%
Published
2004-11-23
Updated
2017-07-11
2 vulnerabilities found