CVE-2010-0724

SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0725

Cross-site scripting XSS vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2010-0725

CVE-2010-0725 describes a Cross-site scripting (XSS) vulnerability in Arab Cart 1.0.2.0. The flaw is in showimg.php and allows an attacker to inject arbitrary web script or HTML by manipulating the id parameter. The cited NVD entry shows a base score of 4.3 (Medium) under CVSS v2, with no confide...

CVE-2010-0724

SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0724

CVE-2010-0724 describes an SQL injection in Arab Cart 1.0.2.0, where an attacker can manipulate the id parameter in showimg.php to execute arbitrary SQL commands. The vulnerability is documented with a CVSSv2 base score of 7.5 (HIGH) and reflects a network-exposed, low-complexity vector without r...

CVE-2010-0725: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2010-0724: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Zen Cart local file disclosure-vulnerability warning-the black bar safety net

by t00ls Get the page path where the url/extras/ipntestreturn.php To obtain site configuration information url/extras/curltest. php? url=file://path/includes/configure.php Read the server passwd url/extras/curltest. php? url=file:///etc/passwd Get the MYSQL password, but the database only allows...

Arab Cart Version v1.0.2.0 Multiple Vulnerabilities

Exploit for unknown platform in category web applications =================================================== Arab Cart Version v1.0.2.0 Multiple Vulnerabilities =================================================== | Script : Copyright ArabCART © .2010 | Tested on: windows SP2 Fran?ais V.Pnx2 2.0...

Arab Cart 1.0.2.0 - Multiple Vulnerabilities

Arab Cart 1.0.2.0 - Multiple Vulnerabilities ======================================================================================== | Title : Arab Cart Version 1.0.2.0 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Arab Cart 1.0.2.0 - Multiple Vulnerabilities

======================================================================================== | Title : Arab Cart Version 1.0.2.0 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Script : Copyright ArabCA...

Arab Cart 1.0.2.0 Cross Site Scripting / SQL Injection

======================================================================================== | Title : Arab Cart Version 1.0.2.0 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

Arab Cart Version 1.0.2.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================ Arab Cart Version 1.0.2.0 Insecure Cookie Handling Vulnerability ================================================================...

Arab Cart 1.0.2.0 Insecure Cooking Handling

======================================================================================== | Title : Arab Cart Version 1.0.2.0 Insecure Cookie Handling Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Sit...

X-Cart Pro 4.0.13 SQL Injection

Title: X-Cart Pro v4.0.13 SQL Injection Proof of Concept Author: s4squatch Published: 2010-02-11 X-Cart Pro v4.0.13 SQL Injection Proof of Concept Discovered By: s4squatch of SecureState R&D Team www.securestate.com Discovered: Mon, 08 Sep 2008 20:29:07 GMT Version: 4.0.13 obtained from...

X-Cart Pro v4.0.13 SQL Injection Proof of Concept

Exploit for unknown platform in category web applications ================================================= X-Cart Pro v4.0.13 SQL Injection Proof of Concept ================================================= X-Cart Pro v4.0.13 SQL Injection Proof of Concept Discovered By: s4squatch of SecureState...

X-Cart Pro 4.0.13 - SQL Injection

X-Cart Pro 4.0.13 - SQL Injection X-Cart Pro v4.0.13 SQL Injection Proof of Concept Discovered By: s4squatch of SecureState R&D Team www.securestate.com Discovered: Mon, 08 Sep 2008 20:29:07 GMT Version: 4.0.13 obtained from www.website.com/README Can't find reference to this old vuln elsewhere...

X-Cart Pro 4.0.13 - SQL Injection

X-Cart Pro v4.0.13 SQL Injection Proof of Concept Discovered By: s4squatch of SecureState R&D Team www.securestate.com Discovered: Mon, 08 Sep 2008 20:29:07 GMT Version: 4.0.13 obtained from www.website.com/README Can't find reference to this old vuln elsewhere... Ref's:...

StivaSoft Stiva SHOPPING CART 1.0 - demo.php Cross-Site Scripting

StivaSoft Stiva SHOPPING CART 1.0 - demo.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40310/info Stiva SHOPPING CART is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

StivaSoft Stiva SHOPPING CART 1.0 - 'demo.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40310/info Stiva SHOPPING CART is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...