PT-2012-5837

Name of the Vulnerable Software and Affected Versions xClick Cart versions 1.0.1 through 1.0.2 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the shopping url parameter in the webscr.php file. Recommendations For versions 1.0.1 and 1.0....

CVE-2012-5225: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the shoppingurl parameter...

Sql injection

SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-5198

CVE-2011-5198 is a confirmed SQL injection in the Neturf eCommerce Shopping Cart, targeting the search.php endpoint. The vulnerability allows remote attackers to append arbitrary SQL via the SearchFor parameter (no authentication required, network access). CVSS v2 metrics indicate a base score of...

CVE-2011-5198

SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...

PT-2012-2175

Name of the Vulnerable Software and Affected Versions Neturf eCommerce Shopping Cart affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the SearchFor parameter in the "search.php" file. Recommendations At the momen...

Ez Cart - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CVE-2011-5198: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...

Webify eDownloads Cart Arbitrary File Deletion

!x! Informations: Name : Webify edownloads cart Download : http://www.webify.ws/edownloadscart Vulnerability : Delete Arbitrary File VulnerabilityAuthor : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM Miss !x! Bug: Delete Arbitrary File Vulnerability...

Webify eDownloads Cart Arbitrary File Deletion Vulnerability

Exploit for php platform in category web applications !x! Informations: Name : Webify edownloads cart Download : http://www.webify.ws/edownloadscart Vulnerability : Delete Arbitrary File VulnerabilityAuthor : JIKOJAWAD Contact : email protected Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM...

Webify eDownloads Cart - Arbitrary File Deletion

!x! Informations: Name : Webify edownloads cart Download : http://www.webify.ws/edownloadscart Vulnerability : Delete Arbitrary File VulnerabilityAuthor : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM Miss !x! Bug: Delete Arbitrary File Vulnerability...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...

CVE-2012-2116

Cross-site request forgery CSRF vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...

CVE-2012-2116

Cross-site request forgery CSRF vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...

CVE-2012-2116: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...

TomatoCart 1.1.7 Cross Site Scripting

------------------------------------------------------------- Name : TomatoCart 1.1.7 XSS ------------------------------------------------------------- Date : 29.08.2012 ------------------------------------------------------------- Site : www.tomatocart.com...

RV Shopping Cart Cross Site Request Forgery

Exploit Title: RV Shopping cart CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

RV Shopping Cart - Cross-Site Request Forgery

RV Shopping Cart - Cross-Site Request Forgery Exploit Title: RV Shopping cart CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

RV Shopping Cart - Cross-Site Request Forgery

Exploit Title: RV Shopping cart CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

Bitcart Remote File Upload

Exploit for php platform in category web applications Exploit Title: Bitcart Remote File Upload Date: 23/08/2012 Author: DaOne @LibyanCA Vendor: http://www.bit-cart.com/ Price: $399 Google dork: intext:"Shopping cart developed By Bitwords Media" Exploit http://site.com/upload.php Find Your Ev!L o...