4984 matches found
CS-Cart <= 1.3.3 (classes_dir) Remote File Include Vulnerability
No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 classesdir = Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$...
CS-Cart <= 1.3.3 (classes_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ CS-Cart = 1.3.3 classesdir Remote File Include Vulnerability ================================================================ $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM...
CS-Cart 1.3.3 - 'classes_dir' Remote File Inclusion
$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 classesdir = Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$...
CS-Cart 1.3.3 - classes_dir Remote File Inclusion
CS-Cart 1.3.3 - classesdir Remote File Inclusion $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 classesdir = Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$...
ishopcart cgi 0day and multiple vulnerabilities
Vendor: ishopcart inc Vendor Site: ishopcart.com Vendor Status: notified via telephone While spending a night auditing I have found 2 buffer overflows and 1 directory traversal in the ishopcart cgi, which is written in C. The directory traversal is caused by how the cgi chooses to show pages. If,...
CosmicShoppingCart - search.php SQL Injection
CosmicShoppingCart - search.php SQL Injection Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, th...
PT-2006-3431 · Squirrelcart · Squirrelcart
Name of the Vulnerable Software and Affected Versions: Squirrelcart versions 2.2.2 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the cart isp root parameter in the cart content.php file. Recommendations: For Squirrelcart version...
[SA20121] Squirrelcart "cart_isp_root" File Inclusion Vulnerability
TITLE: Squirrelcart "cartisproot" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA20121 VERIFY ADVISORY: http://secunia.com/advisories/20121/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Squirrelcart PHP Shopping Cart 2.x http://secunia.com/product/9957/...
Sql injection
Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 categoryid parameter in a storespecialoffers.php and b store.php, and 2 prodid parameter in c cart.php and d productinfo.php. NOTE: this issue also...
CVE-2006-2163
Cross-site scripting XSS vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inject arbitrary web script or HTML via the setbackurl parameter...
CVE-2006-2164
Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 categoryid parameter in a storespecialoffers.php and b store.php, and 2 prodid parameter in c cart.php and d productinfo.php. NOTE: this issue also...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter in a storespecialoffers.php and b store.php and 2 prodid parameter in c productinfo.php. NOTE: this issue might...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inject arbitrary web script or HTML via the setbackurl parameter...
CVE-2006-2165
Multiple cross-site scripting XSS vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter in a storespecialoffers.php and b store.php and 2 prodid parameter in c productinfo.php. NOTE: this issue might...
CVE-2006-2164
CVE-2006-2164 affects Avactis Shopping Cart 0.1.2 and earlier, with SQL injection via the parameters category_id in (a) store_special_offers.php and (b) store.php, and prod_id in (c) cart.php and (d) product_info.php. The issue may also cause full path disclosure from invalid SQL queries. No expl...
CVE-2006-2163
CVE-2006-2163 is an XSS vulnerability in Pinnacle Cart (versions up to 3.33 and earlier) where the setbackurl parameter in index.php can be exploited to inject arbitrary script/HTML. The root cause is unvalidated/unsanitized input propagated to the browser. Affected software is Pinnacle Cart 3.33...
CVE-2006-2165
CVE-2006-2165 affects Avactis Shopping Cart
CVE-2006-2164
Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 categoryid parameter in a storespecialoffers.php and b store.php, and 2 prodid parameter in c cart.php and d productinfo.php. NOTE: this issue also...
CVE-2006-2163
Cross-site scripting XSS vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inject arbitrary web script or HTML via the setbackurl parameter...
Pinnacle Cart 3.3 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17794/info Pinnacle Cart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browse...