CVE-2008-2038

Multiple SQL injection vulnerabilities in admin/adminindex.php in Turnkey Web Tools SunShop Shopping Cart 4.1.0 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby and 2 sort parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-2038

Multiple SQL injection vulnerabilities in admin/adminindex.php in Turnkey Web Tools SunShop Shopping Cart 4.1.0 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby and 2 sort parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-2038

TurnKey Web Tools SunShop Shopping Cart 4.1.0 has multiple SQL injection vulnerabilities in admin/adminindex.php that allow remote authenticated administrators to execute arbitrary SQL commands via the (1) orderby and (2) sort parameters. This CVE entry notes provenance is unknown and details are...

CVE-2008-2038: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/adminindex.php in Turnkey Web Tools SunShop Shopping Cart 4.1.0 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby and 2 sort parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-1921

SQL injection vulnerability in storepages/categorylist.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...

CVE-2008-1921

The CVE-2008-1921 entry describes an SQL injection in the 5th Avenue Shopping Cart 1.2 trial edition, specifically in store_pages/category_list.php, reachable via the category_ID parameter. The underlying issue allows remote attackers to craft SQL payloads to execute arbitrary commands. Documents...

CVE-2008-1921

SQL injection vulnerability in storepages/categorylist.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...

CVE-2008-1921: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in storepages/categorylist.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...

5th Avenue Shopping Cart (category_ID) SQL Injection Vulnerability

No description provided by source. Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

fifthave-sql.txt

Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

5th Avenue Shopping Cart (category_ID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== 5th Avenue Shopping Cart categoryID SQL Injection Vulnerability ================================================================== 5th avenue Shopping Cart SQL Injection...

5th Avenue Shopping Cart - category_id SQL Injection

5th Avenue Shopping Cart - categoryid SQL Injection Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

5th Avenue Shopping Cart - 'category_id' SQL Injection

Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

Unfixed Redirect vulnerability at www.zen-cart.com

Security researcher APS, has submitted on 04/03/2008 a Redirect vulnerability affecting www.zen-cart.com, which at the time of submission ranked 7684 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is currently unfixed. If you...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1536

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1536

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1536: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected...

CVE-2008-1458

Cross-site scripting XSS vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected...