CVE-2008-1921

The CVE-2008-1921 entry describes an SQL injection in the 5th Avenue Shopping Cart 1.2 trial edition, specifically in store_pages/category_list.php, reachable via the category_ID parameter. The underlying issue allows remote attackers to craft SQL payloads to execute arbitrary commands. Documents...

CVE-2008-1921

SQL injection vulnerability in storepages/categorylist.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...

5th Avenue Shopping Cart (category_ID) SQL Injection Vulnerability

No description provided by source. Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

5th Avenue Shopping Cart - category_id SQL Injection

5th Avenue Shopping Cart - categoryid SQL Injection Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

5th Avenue Shopping Cart (category_ID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== 5th Avenue Shopping Cart categoryID SQL Injection Vulnerability ================================================================== 5th avenue Shopping Cart SQL Injection...

fifthave-sql.txt

Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

5th Avenue Shopping Cart - 'category_id' SQL Injection

Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

Unfixed Redirect vulnerability at www.zen-cart.com

Security researcher APS, has submitted on 04/03/2008 a Redirect vulnerability affecting www.zen-cart.com, which at the time of submission ranked 7684 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is currently unfixed. If you...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1536

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1536

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected...

CVE-2008-1458

Cross-site scripting XSS vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected...

CVE-2008-1458

CVE-2008-1458 affects CS-Cart 1.3.2 (also reported in 1.3.5-SP2 trial edition). The vulnerability is a cross-site scripting (XSS) flaw in index.php, exploitable via the q parameter in a products search action, allowing remote attackers to inject arbitrary HTML/JavaScript. No remediation details a...

CVE-2008-1458

Cross-site scripting XSS vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected...

cscart-xss.txt

CS-Cart XSS Discovered by sasquatch of SecureState - www.securestate.com Version: 1.3.2 obtained from /cscart/install.php GET...

CS-Cart XSS

CS-Cart XSS Discovered by sasquatch of SecureState - www.securestate.com Version: 1.3.2 obtained from /cscart/install.php GET...

CS-Cart 1.3.2 - index.php Cross-Site Scripting

CS-Cart 1.3.2 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/28333/info CS-Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...

CS-Cart 1.3.2 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28333/info CS-Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Mitra Informatika Solusindo cart Remote SQL Injection Vulnerability

No description provided by source. SolpotCrew Community Mitra Informatika Solusindo cart Remote Sql Injection Exploit vendor : http://www.mitrainformatika.com/ Bug Found By : homeedition2001 a.k.a bius 4-03-2008 contact: [email protected] Website :...