CVE-2008-0522

CVE-2008-0522 describes a Cross-site scripting (XSS) vulnerability in multiple Hal Networks shopping-cart products. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Public documentation confirms affected products as Hal Networks shopping-cart softw...

CVE-2008-0522: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in multiple Hal Networks shopping-cart products allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

JVN#01162446 Cross-site scripting vulnerabilities in multiple Hal Networks shopping cart products

Multiple Hal Networks shopping cart software products are vulnerable to cross-site scripting. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest updates provided by the vendor. For more information, refer to the vendor's website...

esmart-bypass.txt

Aria-Security Team http://aria-security.net -------------------------------------- Vendor :http://www.preproject.com Script/Portal: E-SMART CART You can bypass the login page with: ' or ' Shouts :theoutl4w...

Sql injection

SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

E-Smart Cart - Members Login Multiple SQL Injection Vulnerabilities

E-Smart Cart - Members Login Multiple SQL Injection Vulnerabilities source: https://www.securityfocus.com/bid/27452/info E-SMART CART is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...

E-Smart Cart - 'Members Login' Multiple SQL Injection Vulnerabilities

source: https://www.securityfocus.com/bid/27452/info E-SMART CART is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access ...

E-SMART CART bypass

Aria-Security Team http://aria-security.net -------------------------------------- Vendor :http://www.preproject.com Script/Portal: E-SMART CART You can bypass the login page with: ' or ' Shouts :theoutl4w...

CVE-2008-0449

SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0449

SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0449

CVE-2008-0449 : SQL injection in VP-ASP Shopping Cart

CVE-2008-0449: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the kfmbasepath parameter...

CVE-2007-6133

CVE-2007-6133 : A PHP remote file inclusion vulnerability in DevMass Shopping Cart 1.0 and earlier allows an attacker to execute arbitrary PHP code via the kfm_base_path parameter in admin/kfm/initialise.php. The root cause is inclusion of remote files through a user-controlled URL, enabling arbi...

CVE-2007-6133

PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the kfmbasepath parameter...

devmass-rfi.txt

======================================================================== || || || || || || || || || || || || ======================================================================== ======================================================================== DevMass Shopping Cart = 1.0 Remote File...

CVE-2007-6133: Improper Input Validation

PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the kfmbasepath parameter...

DevMass Shopping Cart <= 1.0 Remote File Include Vulnerability

No description provided by source. ======================================================================== || || || || || || || || || &nb...

DevMass Shopping Cart 1.0 - Remote File Inclusion

DevMass Shopping Cart 1.0 - Remote File Inclusion ======================================================================== || || || || || || || || || || || || ========================================================================...

DevMass Shopping Cart 1.0 - Remote File Inclusion

======================================================================== || || || || || || || || || || || || ======================================================================== ======================================================================== DevMass Shopping Cart = 1.0 Remote File...