Qualiteam X-Cart 4.0.8 - search.php?mode Cross-Site Scripting

Qualiteam X-Cart 4.0.8 - search.php?mode Cross-Site Scripting source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These...

Qualiteam X-Cart 4.0.8 - 'register.php?mode' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

Qualiteam X-Cart 4.0.8 - 'error_message.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

Qualiteam X-Cart 4.0.8 - 'home.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

CVE-2005-1789

SQL injection vulnerability in SignIn.asp in India Software Solution shopping cart allows remote attackers to execute arbitrary SQL commands via the password...

India Software Solution Shopping Cart - SQL Injection

India Software Solution Shopping Cart - SQL Injection source: https://www.securityfocus.com/bid/13812/info India Software Solution Shopping Cart is prone to an SQL injection vulnerability. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in...

CVE-2005-1733

CVE-2005-1733 affects Cookie Cart: password file passwd.txt is stored under the web document root with insufficient access control, enabling remote retrieval of usernames and encrypted passwords via a direct request. CVSS v2 base score 5.0 (Medium). No exploitation details or fixes are provided i...

CVE-2005-1732

Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi...

CVE-2005-1733

Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt...

CVE-2005-1732

Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi...

CVE-2005-1732

Cookie Cart is affected by CVE-2005-1732 where remote attackers can read the Order Notification list through the testmycgi and path parameters to testmy.cgi. The available sources confirm this access path but do not specify affected versions, patches, or exact root cause details beyond the parame...

CVE-2005-1733

Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt...

[SA15448] Cookie Cart Exposure of Order Notifications and Passwords

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-1607

CVE-2005-1607 describes an XSS vulnerability in the Remote Cart product’s shop.cgi, permitting remote attackers to inject arbitrary web script or HTML via the (1) merchant or (2) demo parameters. The issue is confirmed across multiple sources (e.g., NVD, Red Hat advisory) and is caused by inadequ...

CVE-2005-1607

Cross-site scripting XSS vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web script or HTML via the 1 merchant or 2 demo parameters...

CVE-2005-1607

Cross-site scripting XSS vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web script or HTML via the 1 merchant or 2 demo parameters...

CVE-2005-1503

Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 searchstring parameter to searchlist.php, the 2 maingroup or 3 secondgroup parameters to itemlist.php, or 4 codeno parameter to itemshow.php...

CVE-2005-1502

Cross-site scripting XSS vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 searchstring parameter to searchlist.php or the 2 secondgroup or 3 maingroup parameters to itemlist.php...

CVE-2005-1503

Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 searchstring parameter to searchlist.php, the 2 maingroup or 3 secondgroup parameters to itemlist.php, or 4 codeno parameter to itemshow.php...

CVE-2005-1502

Cross-site scripting XSS vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 searchstring parameter to searchlist.php or the 2 secondgroup or 3 maingroup parameters to itemlist.php...