CVE-2007-0224

SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginLastname parameter...

CVE-2007-0224

CVE-2007-0224 affects VP-ASP Shopping Cart (version 6.09 and earlier) via the vulnerable endpoint in the file/component shopgiftregsearch.asp . The root cause is a SQL injection vulnerability that can be exploited through the LoginLastname parameter, enabling remote attackers to execute arbitrary...

CVE-2007-0230

PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the installdir parameter. NOTE: CVE and third parties dispute this vulnerability because installdir is defined before use...

CVE-2007-0230

CS-Cart 1.3.3 contains a PHP remote file inclusion in install.php via the install_dir parameter, potentially allowing remote code execution. Several sources note that the vulnerability is disputed because install_dir is defined before use, and no specific exploit details are provided in the docum...

cscart133-rfi.txt

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 install.php Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$...

Title : VP-ASP Shopping Cart 6.09 Remote Multiple Vulnerabilities

Title : VP-ASP Shopping Cart 6.09 Remote Multiple Vulnerabilities Author : ajann Contact : : S.Page : http://www.vpasp.com $$ : $49.00 - $350.00 - $495.00 SQL--------------------------------------------------------- http://target/path//shopgiftregsearch.asp?LoginLastname=SQL Example:...

CS-Cart 1.3.3 (install.php) Remote File Include Vulnerability

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 install.php Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$...

vp-asp shopping cart 6.09 - SQL Injection Cross-Site Scripting

vp-asp shopping cart 6.09 - SQL Injection Cross-Site Scripting Title : VP-ASP Shopping Cart 6.09 Remote Multiple Vulnerabilities Author : ajann Contact : : S.Page : http://www.vpasp.com $$ : $49.00 - $350.00 - $495.00 SQL---------------------------------------------------------...

vp-asp shopping cart 6.09 - SQL Injection / Cross-Site Scripting

Title : VP-ASP Shopping Cart 6.09 Remote Multiple Vulnerabilities Author : ajann Contact : : S.Page : http://www.vpasp.com $$ : $49.00 - $350.00 - $495.00 SQL--------------------------------------------------------- http://target/path//shopgiftregsearch.asp?LoginLastname=SQL Example:...

VP-ASP Shopping Cart 6.09 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== VP-ASP Shopping Cart 6.09 SQL/XSS Multiple Remote Vulnerabilities =================================================================== Title : VP-ASP Shopping Cart 6.09 Remo...

Sql injection

SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

CVE-2007-0142

CVE-2007-0142 describes a SQL injection in orange.asp of ShopStoreNow E-commerce Shopping Cart, exploitable via the CatID parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry lists base metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P, base score 7.5 (HIGH). Th...

Shopstorenow E-commerce Shopping Cart Orange.ASP SQL注入漏洞

Shopstorenow E-commerce Shopping Cart 是一款基于ASP的WEB应用程序。 Shopstorenow E-commerce Shopping Cart 不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Orange.ASP'脚本对用户提交的'CatID'参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 Shopstorenow E-commerce Shopping Cart 目前没有解决方案提供： http://www.shopstorenow.com...

CVE-2006-6868

Multiple cross-site scripting XSS vulnerabilities in Zen Cart Web Shopping Cart before 1.3.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6868

CVE-2006-6868 affects Zen Cart Web Shopping Cart prior to 1.3.7. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to the NVD entry, the CVSS v2 base score is 6.8 (Mediu...

CVE-2006-6868

Multiple cross-site scripting XSS vulnerabilities in Zen Cart Web Shopping Cart before 1.3.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

fishyshoop-vuln.txt

Synopsis ======== The Fishyshoop shopping cart software contains a vulnerability which allows arbitrary users to create accounts with administrator privileges Background ========== Fishyshoop is a suite of PHP scripts allowing anybody to create an attractive online store. Affected Versions...

Fishyshoop Security Vulnerability

Synopsis ======== The Fishyshoop shopping cart software contains a vulnerability which allows arbitrary users to create accounts with administrator privileges Background ========== Fishyshoop is a suite of PHP scripts allowing anybody to create an attractive online store. Affected Versions...

Valdersoft Shopping Cart Common.PHP远程文件包含漏洞

Valdersoft Shopping Cart是一款基于PHP的WEB应用程序。 Valdersoft Shopping Cart不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Common.PHP'脚本对用户提交的'commonIncludePath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Valdersoft Shopping Cart 3.0 目前没有解决方案提供： http://www.valdersoft.com/valdersoftshoppingcart.php...

CVE-2006-6691

Multiple PHP remote file inclusion vulnerabilities in Valdersoft Shopping Cart 3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the commonIncludePath parameter to 1 admin/include/common.php, 2 include/common.php, or 3 commoninclude/common.php...