← Back

Media2 Cms

media2_cms

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Media2 Cms Shop
media2_cms_shop
1 CVE
Shop
shop
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-0532
1Media2 Cms
1Shop
Apr 16, 2026
Feb 4, 2006
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute.
CVE-2005-4404
1Media2 Cms
1Media2 Cms Shop
Apr 16, 2026
Dec 20, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter. NOTE: the provenance of this issue is unknown; the details were obtain...Show more
SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources.Show less