Valdersoft Shopping Cart 3.0 - Remote Command Execution

!/usr/bin/perl cijfer-vscxpl - Valdersoft Shopping Cart All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-vscxpl.pl -h www.valdersoft.com -d /store [email protected] /$ id;uname -a uid=2526apache gid=2524apache groups=2524apache, 10004psaserv FreeBSD valdersoft.com...

Primo Place Primo Cart 1.0 - Multiple SQL Injections

Primo Place Primo Cart 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/16125/info Primo Cart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Primo Cart SQL inj.

Primo Cart SQL inj. Vuln. discovered by : r0t Date: 2 jan. 2006 orginal advisory:http://pridels.blogspot.com/2006/01/primo-cart-sql-inj.html vendor:www.primoplace.com/primo-cart.htm affected version:1.0 and prior Product Description: Primo Cart is a fully customizable turnkey shopping cart soluti...

CVE-2005-4787

Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to 1 index.php, 2 admin/index.php, and 3 admin/adminindex.php, which executes the PHP phpinfo function. NOTE: The vendor has disputed this issue, saying that "Having this in the co...

PT-2005-5450 · Turnkey Web Tools · Sunshop Shopping Cart

Name of the Vulnerable Software and Affected Versions: Turnkey Web Tools SunShop Shopping Cart affected versions not specified Description: The issue allows remote attackers to obtain sensitive information via a phpinfo action to specific API endpoints: "index.php", "admin/index.php", and...

CVE-2005-4572

Multiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 GroupsId and 2 ItemsId parameters in admin.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4571

Cross-site scripting XSS vulnerability in myEZshop Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4571

Cross-site scripting XSS vulnerability in myEZshop Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4571

The provided documents confirm a Cross-site scripting (XSS) vulnerability in the myEZshop Shopping Cart . The issue allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. No explicit root cause or vulnerable version is stated in the sources; the impact is limite...

CVE-2005-4572

Multiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 GroupsId and 2 ItemsId parameters in admin.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4572

The CVE-2005-4572 entry concerns SQL injection vulnerabilities in the myEZshop Shopping Cart. According to the provided documents, remote attackers can execute arbitrary SQL commands via the GroupsId and ItemsId parameters in admin.php. The root cause is unauthenticated SQL handling in these para...

CS-Cart - Multiple SQL Injections

CS-Cart - Multiple SQL Injections source: https://www.securityfocus.com/bid/16134/info CS-Cart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation...

CS-Cart - Multiple SQL Injections

source: https://www.securityfocus.com/bid/16134/info CS-Cart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of th...

CVE-2005-4429

SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 sortby and 2 sortorder parameters to index.php...

CVE-2005-4429

CVE-2005-4429 describes a SQL injection vulnerability in CS-Cart 1.3.0. The flaw resides in index.php where the parameters sort_by and sort_order can be exploited by remote attackers to execute arbitrary SQL commands. Documents indicate this affects CS-Cart 1.3.0 and allow arbitrary SQL execution...

CVE-2005-4429

SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 sortby and 2 sortorder parameters to index.php...

CVE-2005-4314

Cross-site scripting XSS vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 stop and 2 user parameters...

CVE-2005-4314

Cross-site scripting XSS vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 stop and 2 user parameters...

CVE-2005-4314

CVE-2005-4314 describes a cross-site scripting (XSS) vulnerability in the ppcal.cgi component of PPCal Shopping Cart 3.3.0 and earlier. The vulnerability allows an attacker to inject arbitrary web script or HTML via the (1) stop and (2) user parameters. Evidence from NVD states a medium severity ...

CVE-2005-4290

Cross-site scripting XSS vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 kword, 2 max, 3 min, 4 comp, and 5 f parameters...