Comersus Cart 7.0.7 comersus_optReviewReadExec.asp id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/24562/info Comersus Cart is affected by multiple input validation vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the...

Comersus Open Technologies Comersus 5.0 comersus_message.asp XSS

No description provided by source. source: http://www.securityfocus.com/bid/10674/info Comersus Cart is reported prone to multiple vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks and manipulate parameters to change the price of an order. Comersu...

e-cart 3.0 - Multiple Vulnerabilities

No description provided by source...

Zen Cart <= 1.3.9h - Multiple Vulnerabilities

No description provided by source. ================================================================== Multiple Vulnerabilities in Zen Cart Vendor SW = Zen Cart - http://www.zen-cart.com Version = 1.3.9f, 1.3.9h but possible all versions Vendor URL = www.zen-cart.com Tested on = BackTrack 4 Catego...

Pre E-Smart Cart Authentication Bypass

No description provided by source. Exploit Title:Pre E smart cart authentication bypass Date: 16th july 2010 Author: D4rk357 Critical:high contact:d4rk357atyahoodotin Price : 49$ Software Link:http://preproject.com/smartcart.asp Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty,...

zen cart 1.3.9f - Multiple Vulnerabilities

No description provided by source. Zen Cart v1.3.9f Multiple Remote Vulnerabilities Vendor: Zen Ventures, LLC Product web page: http://www.zen-cart.com Version affected: 1.3.9f Summary: Zen Cart is an online store management system. It is PHP-based, using a MySQL database and HTML components...

iScripts MultiCart 2.2 - Multiple SQL Injection Vulnerability

No description provided by source. iScripts MultiCart 2.2 Multiple SQL Injection Vulnerability Name iScripts MultiCart Vendor http://www.iscripts.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date...

Naxtor Shopping Cart 1.0 Lost_password.PHP Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14454/info Naxtor Shopping Cart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Tradingeye E-commerce Shopping Cart Multiple Vulnerabilities

No description provided by source. Exploit Title: Tradingeye Multiple Vulnerabilities Vendor: www.tradingeye.com Date: 12th july,2011 Author: $4d0//r007k17 a.k.a Raghavendra Karthik D http://www.shadowrootkit.wordpress.com Google Dork: Powered by Tradingeye. 2009 Tradingeye v6 demo BREIF...

Zen Cart Web Shopping Cart 1.x autoload_func.php autoLoadConfig[999][0][loadFile] Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19543/info Zen Cart is prone to multiple remote and local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote and local...

AFFCommerce Shopping Cart 1.1.4 ItemReview.php item_id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query...

phpShop Web Shopping Cart 0.6.1 -b Multiple Function XSS

No description provided by source. source: http://www.securityfocus.com/bid/9437/info Multiple vulnerabilities have been reported to exist in the software that may allow an attacker to carry out attacks against the database, disclose sensitive information, and execute HTML or script code in a...

Qualiteam X-Cart 4.0.8 home.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remot...

CVE-2014-3846

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

CVE-2014-3846

CVE-2014-3846 describes a cross-site scripting (XSS) vulnerability in Flying Cart where remote attackers can inject arbitrary web script or HTML via the p parameter to index.php. The affected element is the web-facing application logic handling p in index.php, enabling potential script execution ...

CVE-2014-3846

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

Flying Cart Cross Site Scripting

Cross Site Scripting on Online Store Flying Cart Risk: Low CWE number: CWE-79 Date: 19/05/2014 Vendor: Flying Cart Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http:/host/index.php?p=xss PoC: -Target:...

CVE-2013-2705

Cross-site request forgery CSRF vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings...

CVE-2013-2705

CVE-2013-2705 is a CSRF vulnerability in the WordPress Simple PayPal Shopping Cart plugin (pre-3.6). It allows remote attackers to hijack the administrator’s session and perform plugin-setting changes. Affected: WordPress plugin versions before 3.6. Exploitation details are not provided in the do...