Cross site scripting

Cross-site scripting XSS vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2009-4856

Cross-site scripting XSS vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2009-4856

CVE-2009-4856 describes a cross-site scripting (XSS) vulnerability in the PHP Easy Shopping Cart 3.1R, specifically in subitems.php where the name parameter can be manipulated to inject arbitrary script or HTML. The vulnerability allows remote attackers to execute injected code in the context of ...

Comersus 8 Shopping Cart Cross Site Request Forgery / SQL Injection

Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart Version: Web Application vendor :http://www.comersus.com/index.html Date: 1 apr,2010 Author:Sid3^effects Code : -------------------------------------------------------------------------------------- Sid3^effects aKa Ha...

Comersus 8 Shopping Cart - SQL Injection Cross-Site Request Forgery

Comersus 8 Shopping Cart - SQL Injection Cross-Site Request Forgery Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart Version: Web Application vendor :http://www.comersus.com/index.html Date: 1 apr,2010 Author:Sid3^effects Code :...

Comersus 8 Shopping Cart - SQL Injection / Cross-Site Request Forgery

Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart Version: Web Application vendor :http://www.comersus.com/index.html Date: 1 apr,2010 Author:Sid3^effects Code : -------------------------------------------------------------------------------------- Sid3^effects aKa Ha...

Comersus 8 Shopping Cart SQL Injection and CSRF Vulnerability

Exploit for asp platform in category web applications ============================================================= Comersus 8 Shopping Cart SQL Injection and CSRF Vulnerability ============================================================= Exploit Title:SQL Injection and CSRF Vulnerability in...

CVE-2010-1588

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

Sql injection

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

Directory traversal

Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to determine the existence of arbitrary files via directory traversal sequences in the client's DNS hostname aka the REMOTEHOST variable, related t...

CVE-2010-1590

Cross-site scripting XSS vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to inject arbitrary web script or HTML via the client's DNS hostname aka the REMOTEHOST variable, related to the CookielessGenerateFilename an...

CVE-2010-1589

The CVE-2010-1589 entry concerns Rocksalt International VP-ASP Shopping Cart, version 6.50 and earlier, with a directory traversal vulnerability in shopsessionsubs.asp. The issue arises from manipulation of the REMOTE_HOST (DNS hostname) variable, linked to CookielessGenerateFilename and Cookiele...

CVE-2010-1588

CVE-2010-1588 affects Rocksalt International VP-ASP Shopping Cart (version 6.50 and earlier). The vulnerability is a SQL injection in the Getwebsess function (shopsessionsubs.asp) that allows an attacker to modify the websess parameter to execute arbitrary SQL commands. Impact is described as par...

CVE-2010-1588

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

CVE-2010-1590

CVE-2010-1590 is an XSS vulnerability affecting Rocksalt International VP-ASP Shopping Cart (version 6.50 and earlier), exploitable via the REMOTE_HOST DNS hostname. The issue is tied to the CookielessGenerateFilename and CookielessReadFile functions, allowing remote attackers to inject arbitrary...

Acart <= 2.0 Shopping Cart Software Backup Dump Vulnerability

Exploit for php platform in category web applications ============================================================= Acart = 2.0 Shopping Cart Software Backup Dump Vulnerability =============================================================...

Acart 1.0 / 2.0 Shopping Cart Database Disclosure

======================================================================================== | Title : Acart 1.0 Shopping Cart Software Backup Dump Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Bug : Backup ====================== Exploit By indoushka ===============================...

Acart 2.0 Shopping Cart - Software Backup Dump

Acart 2.0 Shopping Cart - Software Backup Dump ======================================================================================== | Title : Acart = 2.0 Shopping Cart Software Backup Dump Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Bug : Backup ======================...

Acart 2.0 Shopping Cart - Software Backup Dump

======================================================================================== | Title : Acart = 2.0 Shopping Cart Software Backup Dump Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Bug : Backup ====================== Exploit By indoushka...

CVE-2010-1541

Multiple cross-site scripting XSS vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 category and 2 listquantity parameters to index.php, and the 3 category parameter to your.order.php...