SGX-SP Final and SGX-SP Final NE vulnerable to cross-site scripting

Overview SGX-SP Final and SGX-SP Final NE are vulnerable to cross-site scripting. SGX-SP Final and SGX-SP Final NE are shopping cart software. SGX-SP Final and SGX-SP Final NE are vulnerable to cross-site scripting. Yoshinori Ohta of Business Architects Inc. reported this vulnerability to IPA...

CVE-2010-4631

Multiple cross-site scripting XSS vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 countrycode parameter to contact.asp, USERNAME parameter to 2 gateway.asp and 3 cart.asp, and the specific parameter to 4 quote.asp and 5 buyitnow...

CVE-2010-4632

Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the 1 article parameter to kb.asp, 2 specific parameter to cart.asp, 3 countrycode parameter to contact.asp, and the 4 srch parameter to search.asp. NOTE: the article...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 countrycode parameter to contact.asp, USERNAME parameter to 2 gateway.asp and 3 cart.asp, and the specific parameter to 4 quote.asp and 5 buyitnow...

Sql injection

Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the 1 article parameter to kb.asp, 2 specific parameter to cart.asp, 3 countrycode parameter to contact.asp, and the 4 srch parameter to search.asp. NOTE: the article...

CVE-2010-4631

Multiple cross-site scripting XSS vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 countrycode parameter to contact.asp, USERNAME parameter to 2 gateway.asp and 3 cart.asp, and the specific parameter to 4 quote.asp and 5 buyitnow...

CVE-2010-4631

ASPilot Pilot Cart 7.3 is affected by multiple XSS vulnerabilities. The issues enable injection of arbitrary web script/HTML via the following inputs: (1) countrycode in contact.asp, (2) USERNAME in gateway.asp, (3) USERNAME in cart.asp, and the specific parameter in quote.asp and buyitnow. The c...

CVE-2010-4632

ASPilot Pilot Cart 7.3 is affected by SQL injection vulnerabilities (CVE-2010-4632) in multiple input vectors. The description specifies four vulnerable parameters: article (to kb.asp), a parameter to cart.asp, countrycode (to contact.asp), and srch (to search.asp). The root cause is improper san...

iDevSpot iDevCart 1.10 - Multiple Local File Inclusions

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- iDevSpot...

Pro cart 2.3.5 ICH Vulnerability

Exploit for php platform in category web applications ================================ Pro cart 2.3.5 ICH Vulnerability ================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /'...

Pro cart 2.3.5 Backup listen folder Vulnerability

Exploit for php platform in category web applications ================================================= Pro cart 2.3.5 Backup listen folder Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

Lizard Cart 1.4 Upload Vulnerability

Exploit for php platform in category web applications ==================================== Lizard Cart 1.4 Upload Vulnerability ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

ASPilot Pilot Cart 7.3 SQL Injection

Title: ASPilot Pilot Cart 7.3 SQL Injection Date: 12.11.2010 Author: Daikin Software Link: http://www.pilotcart.com Version: 7.3 maybe also lower Vendor's Description of Software and demo: http://www.pilotcart.com Dork: Powered by Pilot Cart V.7.3 Application Info: Name: Pilot Cart version last 7...

ASPilot Pilot Cart 7.3 - newsroom.asp SQL Injection

ASPilot Pilot Cart 7.3 - newsroom.asp SQL Injection Title: ASPilot Pilot Cart 7.3 SQL Injection Date: 12.11.2010 Author: Daikin Software Link: http://www.pilotcart.com Version: 7.3 maybe also lower Vendor's Description of Software and demo: http://www.pilotcart.com Dork: Powered by Pilot Cart V.7...

ASPilot Pilot Cart 7.3 newsroom.asp SQL Injection Vulnerability

Exploit for asp platform in category web applications =============================================================== ASPilot Pilot Cart 7.3 newsroom.asp SQL Injection Vulnerability =============================================================== Title: ASPilot Pilot Cart 7.3 SQL Injection Date:...

ASPilot Pilot Cart 7.3 - 'newsroom.asp' SQL Injection

Title: ASPilot Pilot Cart 7.3 SQL Injection Date: 12.11.2010 Author: Daikin Software Link: http://www.pilotcart.com Version: 7.3 maybe also lower Vendor's Description of Software and demo: http://www.pilotcart.com Dork: Powered by Pilot Cart V.7.3 Application Info: Name: Pilot Cart version last 7...

ASPilot Pilot Cart 7.3 Cross Site Scripting / SQL Injection

Title: ASPilot Pilot Cart 7.3 multiple vulnerabilities Date: 07.11.2010 Author: Ariko-Security Software Link: http://www.pilotcart.com Version: 7.3 CVE Reference: CVE-2008-2688 only 1 SQL injection EDB-ID: 5765 only 1 SQL injection Ariko-Security: Security Audits , Audyt bezpieczeñstwa Advisory:...

ASPilot Pilot Cart 7.3 Multiple Vulnerabilities

Exploit for php platform in category web applications =============================================== ASPilot Pilot Cart 7.3 Multiple Vulnerabilities =============================================== Title: ASPilot Pilot Cart 7.3 multiple vulnerabilities Date: 07.11.2010 Author: Ariko-Security...

ASPilot Pilot Cart 7.3 - Multiple Vulnerabilities

ASPilot Pilot Cart 7.3 - Multiple Vulnerabilities Title: ASPilot Pilot Cart 7.3 multiple vulnerabilities Date: 07.11.2010 Author: Ariko-Security Software Link: http://www.pilotcart.com Version: 7.3 CVE Reference: CVE-2008-2688 only 1 SQL injection EDB-ID: 5765 only 1 SQL injection Ariko-Security:...

Zen Cart 1.3.9h Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================== Zen Cart 1.3.9h Local File Inclusion Vulnerability ================================================== Name Zen Cart Vendor http://www.zen-cart.com Versions Affected 1.3.9h Author Salvatore...