Vulnerabilities (CVE)

Filtered by vendor Webcortex Subscribe
Filtered by product Webstores 2000
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-0304 1 Webcortex 1 Webstores 2000 2023-12-10 10.0 HIGH N/A
SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the Search_Text parameter.
CVE-2004-0305 1 Webcortex 1 Webstores 2000 2023-12-10 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Message_id parameter.