CVE-2006-4214

Zen Cart 1.3.0.2 and earlier contains multiple SQL injection vulnerabilities. The flaws are exploitable via: (1) GPC data to ipn_get_stored_session in ipn_main_handler.php (can modify $_SESSION), (2) session id in a cookie to whos_online_session_recreate, (3) quantity in add_cart, (4) id[] when a...

CVE-2005-4214

CVE-2005-4214 concerns phpCOIN 1.2.2. Affected component: installation/config flow via config.php. Root cause: the _CCFG['_PKG_PATH_DBSE'] variable is not defined, causing an error message that leaks the installation path to remote attackers. Impact: partial disclosure of information (installatio...

MS:9750C40C-CB2A-4214-A7DF-7633CC39D109

...