CVE-2008-5567: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/adsettings.php in Bonza Cart 1.10 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...

Meta Cart Free Database Disclosure

Meta Cart Free Database Disclosure AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download : http://www.metalinks.com/metacart.htm DORK : "Powered by MetaCart" Bug...

VP-ASP Shopping Cart 6.50 Database Disclosure

VP-ASP Shopping Cart V6.50 Database Disclosure Vulnerability ============================= ----- Script information ----- ============================= VP-ASP Shopping Cart V6.50 Script Website : www.vpasp.com Found by : Dxil Contact : [email protected] [email protected] ===========================...

VP-ASP Shopping Cart 6.50 Database Disclosure Vulnerability

Exploit for unknown platform in category web applications =========================================================== VP-ASP Shopping Cart 6.50 Database Disclosure Vulnerability =========================================================== VP-ASP Shopping Cart V6.50 Database Disclosure Vulnerabilit...

VP-ASP Shopping Cart 6.50 Database Disclosure Vulnerability

No description provided by source. VP-ASP Shopping Cart V6.50 Database Disclosure Vulnerability ============================= ----- Script information ----- ============================= VP-ASP Shopping Cart V6.50 Script Website : www.vpasp.com Found by : Dxil Contact : [email protected]...

VP-ASP Shopping Cart 6.50 - Database Disclosure

VP-ASP Shopping Cart 6.50 - Database Disclosure VP-ASP Shopping Cart V6.50 Database Disclosure Vulnerability ============================= ----- Script information ----- ============================= VP-ASP Shopping Cart V6.50 Script Website : www.vpasp.com Found by : Dxil Contact :...

VP-ASP Shopping Cart 6.50 - Database Disclosure

VP-ASP Shopping Cart V6.50 Database Disclosure Vulnerability ============================= ----- Script information ----- ============================= VP-ASP Shopping Cart V6.50 Script Website : www.vpasp.com Found by : Dxil Contact : [email protected] [email protected] ===========================...

4 5 You can obtain the Webshell program-vulnerability warning-the black bar safety net

1: Go to GoogLe,search some keywords,edit. asp? Korean broiler chickens is more,the majority of MSSQL database! 2,to Google ,site:cq. cn inurl:asp 3, The use of mining chicken and an ASP Trojan. The file name is login. asp ...... The path set is/manage/ The key word is went. asp 'Or'='or'to login...

Two XSS Flaws in PrestaShop 1.1.0.3

Affects PrestaShop 1.1.0.3 product: homepage: http://prestashop.com This is XSS in the URI of PrestaShop. Trust no one, not even your $SERVERPHPSELF . http://10.1.1.155/prestashop1.1.0.3/admin/login.php/223Cscript3Ealert13C/script3E Add an item to the shoping cart and then vist this url:...

PrestaShop 1.1.0.3 Cross Site Scripting

Affects PrestaShop 1.1.0.3 product: homepage: http://prestashop.com This is XSS in the URI of PrestaShop. Trust no one, not even your $SERVERPHPSELF . http://10.1.1.155/prestashop1.1.0.3/admin/login.php/%22%3Cscript%3Ealert1%3C/script%3E Add an item to the shoping cart and then vist this url:...

Bonza Cart <= 1.10 Admin Password Changing Exploit

No description provided by source. ?php / ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Bonza Cart <= 1.10 Admin Password Changing Exploit

Exploit for unknown platform in category web applications ================================================== Bonza Cart = 1.10 Admin Password Changing Exploit ================================================== ?php / ============================================================================== /...

Bonza Cart 1.10 - Admin Password Changing

=== LIVE === » removed... === Greetz === » ALLAH » Tornado2800 » B13 » AFSHIN-ZARBAT » QU1E » Hussain-...

CodeToad ASP Shopping Cart Script - Cross-Site Scripting

CodeToad ASP Shopping Cart Script - Cross-Site Scripting source: https://www.securityfocus.com/bid/32568/info CodeToad ASP Shopping Cart Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to...

aspshoppingcart-xss.txt

--------------------------------------------------------- Portal Name: ASP Shopping Cart Script Vendor : http://codetoad.com/demos/shoppingcart/ Author : PouyaServer , [email protected] Vulnerability : XSS --------------------------------------------------------- XSS:...

CodeToad ASP Shopping Cart Script - Cross-Site Scripting

source: https://www.securityfocus.com/bid/32568/info CodeToad ASP Shopping Cart Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

comersus-disclosexss.txt

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

comersuscart-xss.txt

--------------------------------------------------------- Portal Name: Comersus Cart Vendor : http://comersus.com Dork: Powered by Comersus ASP Shopping Cart Author : PouyaServer , [email protected] Vulnerability : XSS --------------------------------------------------------- XSS:...

RakhiSoftware Shopping Cart (subcategory_id) SQL Injection Vulnerability

No description provided by source. ■ Prince Comparison Script : Shopping card = Rem0tE $ql Injection @.@ AuToR: XaDoS Contact M&: xados at hotmail dot it B§g: Remote Sql inJection SIte vuln: http://willscript.com/rjbikenew/index.php @.@ ■ ExPL0iT: |:...

Comersus ASP Shopping Cart (DD/XSS) Multiple Remote Vulnerabilities

No description provided by source. 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 ...