Zen Cart 1.3.9h - Multiple Vulnerabilities

================================================================== Multiple Vulnerabilities in Zen Cart Vendor SW = Zen Cart - http://www.zen-cart.com Version = 1.3.9f, 1.3.9h but possible all versions Vendor URL = www.zen-cart.com Tested on = BackTrack 4 Category = WebApps/0day Date = 18 May 201...

st-shop Mall system v1. 0 can be injection-vulnerability warning-the black bar safety net

st-shop is a simple, easy to modify, free web-shop system. Function Description: 1. Supports up to Level 3 commodity classification 2. Support picture upload 3. Members of the management 4. Shopping cart system Admin login address: adminlogin. asp The initial user name and password: admin/8 8 8 8...

Ultra Marketing Enterprises CMS and Cart - Multiple SQL Injections

Ultra Marketing Enterprises CMS and Cart - Multiple SQL Injections source: https://www.securityfocus.com/bid/47421/info Ultra Marketing Enterprises CMS and Cart is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using i...

Ultra Marketing Enterprises CMS and Cart SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Ultra Marketing Enterprises CMS and Cart SQL Injection Vulnerability Author : eXeSoul Date : 1-18-2011 Vendor : http://umecart.com/ Version: ALL VERSION Vulnerable File index.php , product.php Exploit...

Hyena Cart (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://hyenacart.com/ .:. Dork : "This store is powered by Hyena Cart" .:. Home : http://www.sec-risk.com/vb/ === Exploit === www.site.com/index.php?info=nullSql...

Hyena Cart - index.php SQL Injection

Hyena Cart - index.php SQL Injection Hyena Cart index.php Sql Injection Vulnerability ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://hyenacart.com/ .:. Dork : "This store is powered by Hyena Cart" .:. Home :...

Hyena Cart SQL Injection

Hyena Cart index.php Sql Injection Vulnerability ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://hyenacart.com/ .:. Dork : "This store is powered by Hyena Cart" .:. Home : http://www.sec-risk.com/vb/ === Exploit ==...

Hyena Cart - 'index.php' SQL Injection

Hyena Cart index.php Sql Injection Vulnerability ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://hyenacart.com/ .:. Dork : "This store is powered by Hyena Cart" .:. Home : http://www.sec-risk.com/vb/ === Exploit ==...

Sql injection

SQL injection vulnerability in shoppingcart.asp in Ecommercemax Solutions Digital-goods seller DGS 1.5 allows remote attackers to execute arbitrary SQL commands via the d parameter...

PT-2011-2354

Name of the Vulnerable Software and Affected Versions EC-CUBE versions prior to 2.4.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, due to multiple cross-site scripting XSS vulnerabilities in the data/Smarty/templates/default/list.tp...

SGX-SP Final and SGX-SP Final NE vulnerable to cross-site scripting

Overview SGX-SP Final and SGX-SP Final NE are vulnerable to cross-site scripting. SGX-SP Final and SGX-SP Final NE are shopping cart software. SGX-SP Final and SGX-SP Final NE are vulnerable to cross-site scripting. Yoshinori Ohta of Business Architects Inc. reported this vulnerability to IPA...

CVE-2010-4631

Multiple cross-site scripting XSS vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 countrycode parameter to contact.asp, USERNAME parameter to 2 gateway.asp and 3 cart.asp, and the specific parameter to 4 quote.asp and 5 buyitnow...

CVE-2010-4632

Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the 1 article parameter to kb.asp, 2 specific parameter to cart.asp, 3 countrycode parameter to contact.asp, and the 4 srch parameter to search.asp. NOTE: the article...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 countrycode parameter to contact.asp, USERNAME parameter to 2 gateway.asp and 3 cart.asp, and the specific parameter to 4 quote.asp and 5 buyitnow...

Sql injection

Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the 1 article parameter to kb.asp, 2 specific parameter to cart.asp, 3 countrycode parameter to contact.asp, and the 4 srch parameter to search.asp. NOTE: the article...

CVE-2010-4632

ASPilot Pilot Cart 7.3 is affected by SQL injection vulnerabilities (CVE-2010-4632) in multiple input vectors. The description specifies four vulnerable parameters: article (to kb.asp), a parameter to cart.asp, countrycode (to contact.asp), and srch (to search.asp). The root cause is improper san...

CVE-2010-4631

ASPilot Pilot Cart 7.3 is affected by multiple XSS vulnerabilities. The issues enable injection of arbitrary web script/HTML via the following inputs: (1) countrycode in contact.asp, (2) USERNAME in gateway.asp, (3) USERNAME in cart.asp, and the specific parameter in quote.asp and buyitnow. The c...

CVE-2010-4631

Multiple cross-site scripting XSS vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 countrycode parameter to contact.asp, USERNAME parameter to 2 gateway.asp and 3 cart.asp, and the specific parameter to 4 quote.asp and 5 buyitnow...

PT-2010-5596

Name of the Vulnerable Software and Affected Versions ASPilot Pilot Cart version 7.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the article parameter to "kb.asp", a specific parameter to "cart.asp", the...

PT-2010-5595

Name of the Vulnerable Software and Affected Versions ASPPilot Pilot Cart version 7.3 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via several parameters, including the countryco...