4987 matches found
CVE-2014-8307
Multiple cross-site scripting XSS vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter in the "drop down TOP menu with path" section or 2 printthispage variable in the footercontentbloc...
CVE-2014-8305
Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header to 1 index.php, 2 cart.php, 3 msg.php, or 4 page.php...
CVE-2014-8307
The CVE-2014-8307 entry concerns multiple XSS vulnerabilities in C97net Cart Engine (before 4.0), specifically in skins/default/outline.tpl. The underlying issue is that user-supplied data in (1) the path parameter in the drop down TOP menu (with path) and (2) the print_this_page variable in the ...
CVE-2014-6779
The Cart App aka com.virtecha.mobilewallet application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Cart App aka com.virtecha.mobilewallet application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6779
CVE-2014-6779 affects the Cart App (com.virtecha.mobilewallet) for Android version 1.5. The connected documents confirm that the app does not verify X.509 certificates when establishing SSL connections, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information vi...
Cart Engine 3.0 - Multiple Vulnerabilities
No description provided by source. === Details === Quantum Leap Advisory: http://www.quantumleap.it/cart-engine-3-0-multiple-vulnerabilities-sql-injection-reflected-xss-open-redirect/ Affected Product: Cart Engine Version: 3.0 === Executive Summary === SQL Injection: Using a specially crafted HTT...
Comersus Sophisticated Cart Database Disclosure
!/usr/bin/perl -w Comersus Sophisticated Cart Database Disclosure Exploit Author : indoushka Vondor : http://www.comersus.com use LWP::Simple; use LWP::UserAgent; system'cls'; system'Comersus Sophisticated Cart Database Disclosure Exploit '; system'color a'; if@ARGV new; my $request =...
Cart Engine Multiple Vulnerabilities
Cart Engine is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cart Engine 3.0 - Multiple Vulnerabilities
Exploit for php platform in category web applications === Details === Quantum Leap Advisory: http://www.quantumleap.it/cart-engine-3-0-multiple-vulnerabilities-sql-injection-reflected-xss-open-redirect/ Affected Product: Cart Engine Version: 3.0 === Executive Summary === SQL Injection: Using a...
Cart Engine 3.0 - Multiple Vulnerabilities
Cart Engine 3.0 - Multiple Vulnerabilities === Details === Quantum Leap Advisory: http://www.quantumleap.it/cart-engine-3-0-multiple-vulnerabilities-sql-injection-reflected-xss-open-redirect/ Affected Product: Cart Engine Version: 3.0 === Executive Summary === SQL Injection: Using a specially...
Cart Engine 3.0 - Multiple Vulnerabilities
=== Details === Quantum Leap Advisory: http://www.quantumleap.it/cart-engine-3-0-multiple-vulnerabilities-sql-injection-reflected-xss-open-redirect/ Affected Product: Cart Engine Version: 3.0 === Executive Summary === SQL Injection: Using a specially crafted HTTP request, it is possible to exploi...
Zen Cart 1.5.3 - Multiple Vulnerabilities
No description provided by source. Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id...
Cart Engine 3.0 XSS / Open Redirect / SQL Injection
=== Details === Quantum Leap Advisory: http://www.quantumleap.it/cart-engine-3-0-multiple-vulnerabilities-sql-injection-reflected-xss-open-redirect/ Affected Product: Cart Engine Version: 3.0 === Executive Summary === SQL Injection: Using a specially crafted HTTP request, it is possible to exploi...
SA-CONTRIB-2014-085 - Ubercart - Information disclosure
The Ubercart module for Drupal provides a shopping cart and e-commerce features for Drupal. The per-user order history view is not properly protected. This vulnerability is mitigated by the fact that an attacker must have an account with the "view own orders" permission and can only view order ID...
Zen Cart 1.5.3 - Multiple Vulnerabilities
Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id. localhost/zen/zen-cart-v1.5.3-07042014/admin123/profiles.php?action=delete&profile=2 - Reset layou...
Webasyst Shop Script 5.2.2.30933 Cross Site Scripting
Exploit Title:webasyst shop script stored xss Date: 8/12/2014 Exploit Author: Ankit Bharathan Description: shop-Script 5 Emerging PHP ecommerce framework that helps you increase sales.Feature-rich PHP shopping cart solution & ecommerce framework developed in 2013--2014. One of the leading shoppin...
CS-Cart 4.2.0 Session Hijacking Vulnerability
CS-Cart version 4.2.0 suffers from a session hijacking vulnerability due to weakly minted session identifiers. Vendor: CS-Cart Homepage: https://www.cs-cart.com Fixed in: v4.2.1 Released: July 22nd 2014 CS-Cart is 127MB of shitty PHP and HTML code that is supposed to function as a secure e-commer...
CS-Cart 4.2.0 Session Hijacking
Vendor: CS-Cart Homepage: https://www.cs-cart.com Fixed in: v4.2.1 Released: July 22nd 2014 CS-Cart is 127MB of shitty PHP and HTML code that is supposed to function as a secure e-commerce site. It is developed by people who don't reply to emails but who covertly patch bugs reported to them and...
