RV Shopping Cart - Cross-Site Request Forgery

RV Shopping Cart - Cross-Site Request Forgery Exploit Title: RV Shopping cart CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

RV Shopping Cart - Cross-Site Request Forgery

Exploit Title: RV Shopping cart CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

Bitcart Remote File Upload

Exploit for php platform in category web applications Exploit Title: Bitcart Remote File Upload Date: 23/08/2012 Author: DaOne @LibyanCA Vendor: http://www.bit-cart.com/ Price: $399 Google dork: intext:"Shopping cart developed By Bitwords Media" Exploit http://site.com/upload.php Find Your Ev!L o...

CVE-2012-2570

Cross-site scripting XSS vulnerability in productsmap.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HTML via the symb parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in productsmap.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HTML via the symb parameter...

CVE-2012-2570

Cross-site scripting XSS vulnerability in productsmap.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HTML via the symb parameter...

CVE-2012-2570

CVE-2012-2570: X-Cart Gold 4.5 has an XSS in products_map.php via the symb parameter, allowing remote injection of arbitrary script/HTML. Impact stated as partial integrity; no exploitation details or patch/version remediation provided in the documents.

CVE-2012-2570: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in productsmap.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HTML via the symb parameter...

PT-2012-4110

Name of the Vulnerable Software and Affected Versions X-Cart Gold version 4.5 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the symb parameter in the products map.php file. Recommendations For X-Cart Gold...

X-Cart Gold 4.5 - products_map.php?symb Cross-Site Scripting

X-Cart Gold 4.5 - productsmap.php?symb Cross-Site Scripting Exploit Title: X-Cart Gold 4.5 productsmap.php symb parameter XSS Vulnerability Date: Jul 21 2012 Author: muts Version: X-Cart Gold 4.5 Vendor URL: http://www.x-cart.com/ X-Cart Gold implements a degree of XSS filtering but it is...

X-Cart Gold 4.5 - 'products_map.php?symb' Cross-Site Scripting

Exploit Title: X-Cart Gold 4.5 productsmap.php symb parameter XSS Vulnerability Date: Jul 21 2012 Author: muts Version: X-Cart Gold 4.5 Vendor URL: http://www.x-cart.com/ X-Cart Gold implements a degree of XSS filtering but it is incomplete. The "symb" parameter of "productsmap.php" is vulnerable...

X-Cart Gold 4.5 (products_map.php symb parameter) XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: X-Cart Gold 4.5 productsmap.php symb parameter XSS Vulnerability Date: Jul 21 2012 Author: muts Version: X-Cart Gold 4.5 Vendor URL: http://www.x-cart.com/ X-Cart Gold implements a degree of XSS filtering but it is incomplete. T...

CVE-2012-2731

The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage...

CVE-2012-2731

CVE-2012-2731 affects Ubercart AJAX Cart 6.x-2.x for Drupal prior to 6.x-2.1. The vulnerability stems from storing the PHP session ID in a JavaScript settings array on page loads, which could allow remote attackers to disclose sensitive information by sniffing or reading the HTML cache of a page....

CVE-2012-2731: Exposure of Sensitive Information to an Unauthorized Actor

The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage...

PT-2012-4220

Name of the Vulnerable Software and Affected Versions Ubercart AJAX Cart versions 6.x-2.x before 6.x-2.1 Description The issue allows remote attackers to potentially obtain sensitive information by sniffing or reading the cache of the HTML of a webpage, as the PHP session id is stored in the...

Webify Product Series - Multiple Web Vulnerabilities

Title: ====== Webify Product Series - Multiple Web Vulnerabilities Date: ===== 2012-06-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=598 VL-ID: ===== 598 Common Vulnerability Scoring System: ==================================== 6.5 Introduction: ============= Webif...

Interspire Shopping Cart v6 - Multiple Web Vulnerabilities

Title: ====== Interspire Shopping Cart v6 - Multiple Web Vulnerabilities Date: ===== 2012-06-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=593 VL-ID: ===== 593 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Interspire Shopping Cart 6 Cross Site Scripting

Title: ====== Interspire Shopping Cart v6 - Multiple Web Vulnerabilities Date: ===== 2012-06-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=593 VL-ID: ===== 593 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Squirrelcart Cart Shop 3.3.4 - Multiple Web Vulnerabilities

Title: ====== Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities Date: ===== 2012-06-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=592 VL-ID: ===== 592 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ===========...