hisa_cart information disclosure vulnerability

Overview hisacart from Hisanaga Electric Co.Ltd contains an information disclosure vulnerability. hisacart from Hisanaga Electric Co.Ltd is a shopping cart module for XOOPS. hisacart contains a vulnerability allowing the disclosure of users' information. Impact A remote attacker could obtain...

vividads-sql.txt

Vivid Ads Shopping Cart cid Remote SQL Injection Discovered By : [email protected] 15/10/2008 HomePage : http://mildnet.org Thx to : Nyubi aka Solpot,homeedition2001,dead,ardan, anakbugis,kaka11,rahulxisback,antiunderground,cheio AND FOR ALL IRC.MILDNET.ORG COMMUNITY Dork : "Vivid Ads...

CVE-2008-4467

SQL injection vulnerability in showseriesink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in showseriesink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4467

SQL injection vulnerability in showseriesink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4467: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showseriesink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4467

CVE-2008-4467 : SQL injection vulnerability in the PHP file show_series_ink.php of the Vastal I-Tech Toner Cart. The underlying issue is improper handling of the id parameter, allowing remote attackers to craft SQL commands and potentially affect the database. The entry specifies an impact of par...

CVE-2008-4143

SQL injection vulnerability in categorysearch.php in RazorCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in categorysearch.php in RazorCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4143

SQL injection vulnerability in categorysearch.php in RazorCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4143

The vulnerability CVE-2008-4143 affects RazorCommerce Shopping Cart in category_search.php, where the id parameter is vulnerable to SQL injection. A remote attacker could potentially execute arbitrary SQL commands through this parameter. No exploitation details or concrete patch/version informati...

CVE-2008-4143: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in categorysearch.php in RazorCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...

ephpshopping-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE-DON-Outlawz and all darkc0de members...

PT-2008-5439

Name of the Vulnerable Software and Affected Versions Quick.Cart version 3.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the query string in the admin.php file. Recommendations For Quick.Cart version...

Quick Cart 3.1 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31216/info Quick.Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

Zen Cart SQL注入漏洞

BUGTRAQ ID: 31023 CNCAN ID：CNCAN-2008090509 Zen Cart是一款基于PHP的WEB应用程序。 Zen Cart不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Zen Cart Web Shopping Cart 1.3.8 Zen Cart Web Shopping Cart 1.3.7 Zen Cart Web Shopping Cart 1.3.6 Zen Ca...

E-Shop Shopping Cart Script (search_results.php) SQL Injection Vuln

No description provided by source. ephpscripts SQL Injection Bug Founded By Mormoroth This Portal Isnt Free Sp TNX to : imm02rtal-Magicboy-Yashi Lashi-DJ7xpl-R$p And Others www.mormoroth.net www.shabgard.org dork : Powered by ephpscripts Exploit :...

Vastal I-Tech Toner Cart (id) SQL Injection Vulnerability

No description provided by source. Vastal I-Tech Toner Cart showseriesink.php id SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $400.00 Script Home Page : http://www.vastal.com/toner-cart-a-specialized-script-to-help-you-sell-toners-online.html Demo :...

CS-Cart 'core/user.php' SQL注入漏洞

BUGTRAQ ID: 30979 CNCAN ID：CNCAN-2008090301 CS-Cart是一款基于PHP的WEB应用程序。 CS-Cart不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'core/user.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 CS-Cart 1.3.5 可联系供应商获得补丁信息： http://www.cs-cart.com/...

Zen Cart products_id[] Array SQL Injection

The installed version of Zen Cart does not validate user-supplied input to the 'productsid' parameter array of the 'index.php' script when 'action' is set to 'multipleproductsaddproduct' before using the keys in a database query in the 'incartmixed' function in 'includes/classes/shoppingcart.php'...