Vendor Dictionary: Elemental Software, Inc.

Elemental Software, Inc.

Short Name:	[None Entered]
Previous Names:	[None Entered]
URL:	[None Entered]
Email:	[None Entered]
Security URL:	[None Entered]
Security Email:	[None Entered]
Knowledge Base:	[None Entered]
Notes:	[No Notes]
Full Details...

Vulnerabilities by Vendor Product

Elemental Software, Inc.

Elemental Software, Inc.

CartWIZ: 1.1; OSVDB ID: 15775 CartWIZ tellAFriend.asp idProduct Parameter XSS; OSVDB ID: 15776 CartWIZ addToWishlist.asp idProduct Parameter XSS; OSVDB ID: 15777 CartWIZ access.asp redirect Parameter XSS; OSVDB ID: 15778 CartWIZ error.asp message Parameter XSS; OSVDB ID: 15780 CartWIZ searchResults.asp Multiple Parameter XSS; OSVDB ID: 15779 CartWIZ login.asp Multiple Parameter XSS; OSVDB ID: 15773 CartWIZ searchResults.asp Multiple Parameter SQL Injection; OSVDB ID: 15772 CartWIZ productDetails.asp idProduct Parameter SQL Injection; OSVDB ID: 15771 CartWIZ addToCart.asp idProduct Parameter SQL Injection; OSVDB ID: 15774 CartWIZ productCatalogSubCats.asp idParentCategory SQL Injection; Unknown or Unspecified; OSVDB ID: 17977 CartWIZ viewSupportTickets.asp sortType Parameter SQL Injection; OSVDB ID: 17979 CartWIZ deleteCreditCards.asp id Parameter SQL Injection; OSVDB ID: 17980 CartWIZ login.asp message Parameter XSS; OSVDB ID: 17976 CartWIZ tellAFriend.asp idProduct Parameter SQL Injection; OSVDB ID: 17978 CartWIZ updateCreditCards.asp id Parameter SQL Injection; OSVDB ID: 18463 CartWIZ viewCart.asp message Parameter XSS

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.