Vendor Dictionary: Comersus Open Technologies

Comersus Open Technologies

Short Name:	[None Entered]
Previous Names:	[None Entered]
URL:	[None Entered]
Email:	[None Entered]
Security URL:	[None Entered]
Security Email:	[None Entered]
Knowledge Base:	[None Entered]
Notes:	[No Notes]

Vulnerabilities by Vendor Product

Comersus Open Technologies

Comersus Open Technologies

Comersus Shopping Cart: 5.0991; OSVDB ID: 9524 Comersus ASP Shopping Cart redirecturl HTTP Response Splitting

Comersus Cart: Unknown or Unspecified; OSVDB ID: 17973 Comersus comersus_optReviewReadExec.asp idProduct Parameter SQL Injection; OSVDB ID: 17975 Comersus comersus_backoffice_message.asp message Parameter XSS; OSVDB ID: 17974 Comersus comersus_backoffice_listAssignedPricesToCustomer.asp name Parameter XSS; OSVDB ID: 17972 Comersus comersus_optAffiliateRegistrationExec.asp email Parameter SQL Injection

Comersus ASP Shopping Cart: 4.51; OSVDB ID: 15539 Comersus ASP Shopping Cart comersus_searchItem.asp curPage Parameter XSS; 4.47; OSVDB ID: 15539 Comersus ASP Shopping Cart comersus_searchItem.asp curPage Parameter XSS; 4.36; OSVDB ID: 15539 Comersus ASP Shopping Cart comersus_searchItem.asp curPage Parameter XSS

ASP Shopping Cart: 6.0; OSVDB ID: 13164 Comersus ASP Shopping Cart comersus_backoffice_install10.asp Admin Authentication Bypass; OSVDB ID: 13165 Comersus ASP Shopping Cart default.asp Referer Tag SQL Injection; OSVDB ID: 13166 Comersus ASP Shopping Cart Password Storage Encryption Weakness; OSVDB ID: 13167 Comersus ASP Shopping Cart comersus_supportError.asp error Parameter XSS; OSVDB ID: 13168 Comersus ASP Shopping Cart comersus_backofficelite_supportError.asp XSS

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.