CVE-2006-4970

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4969

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

CVE-2006-4967

Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...

CVE-2006-4970

The CVE-2006-4970 issue is a PHP remote file inclusion vulnerability in enc/content.php of WAHM E-Commerce Pie Cart Pro. An attacker can cause remote code execution by supplying a crafted URL in the Home_Path parameter. The vulnerability affects WAHM E‑Commerce Pie Cart Pro products as described,...

CVE-2006-4970

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4969

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

CVE-2006-4967

Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...

CVE-2006-4969

CVE-2006-4969 refers to multiple PHP remote file inclusion vulnerabilities in the WAHM E-Commerce Pie Cart Pro. The issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the Inc_Dir parameter across numerous PHP files (e.g., affiliates.php, orders.php, events.php, i...

CVE-2006-4967

CVE-2006-4967 involves NextAge Cart with two XSS vectors: via the CatId parameter in the product category action and the SearchWd parameter in the index search action (index.php). The description indicates remote attackers can inject arbitrary script/HTML. No fixes or detailed remediation are pro...

CharonCartv3.txt

Vulnerability Report Title : Charon Cart v3Review.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.charon.co.uk Exploit; http://target/path/Review.asp?ProductID=SQL HERE Example:...

[SA22030] NextAge Cart "CatId" and "SearchWd" Cross-Site Scripting

TITLE: NextAge Cart "CatId" and "SearchWd" Cross-Site Scripting SECUNIA ADVISORY ID: SA22030 VERIFY ADVISORY: http://secunia.com/advisories/22030/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Nextage Cart http://secunia.com/product/12037/ DESCRIPTION: meto5757...

CVE-2006-4904

CVE-2006-4904 affects Qualiteam X-Cart 4.1.3 and earlier. A vulnerability in the cmpi.php script allows dynamic variable evaluation, permitting an attacker to overwrite arbitrary configuration variables and execute arbitrary PHP code (demonstrated via PHP remote file inclusion using the xcart_dir...

Pie Cart Pro => (Home_Path) Remote File Inclusion Exploit

==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.doodlebabies.com/...

Pie Cart Pro => (Inc_Dir) Remote File Inclusion Exploit

==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA http://www.doodlebabies.com/...

Pie Cart Pro => (Home_Path) Remote File Inclusion Exploit

==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.doodlebabies.com/...

NextAge Cart Cross-Site Scripting multiple Vulnerabilities

Vulnerable:NextAge Cart Cross-Site Scripting Vulnerability. Venedor site : http://www.nextagecart.com Critical Level : Dangerous Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks. Exploit :...

[SA22005] Qualiteam X-Cart cmpi.php Variable Overwriting Vulnerability

TITLE: Qualiteam X-Cart cmpi.php Variable Overwriting Vulnerability SECUNIA ADVISORY ID: SA22005 VERIFY ADVISORY: http://secunia.com/advisories/22005/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Qualiteam X-Cart Pro 4.x http://secunia.com/product/11995/ Qualiteam...

CVE-2006-4882

SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID parameter...

CVE-2006-4882

The CVE-2006-4882 entry describes a SQL injection in Review.asp of Julian Roberts Charon Cart 3, exploitable via the ProductID parameter. The underlying vulnerability is the ability for remote attackers to execute arbitrary SQL commands, with impact described as partial confidentiality, integrity...

CVE-2006-4882

SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID parameter...