Дырки в CyberOffice Shopping Cart

Можно поменять стоимость заказа и получить доступ к базе данных сервера...

DST2K0035: Credit card (customer) details exposed within CyberOff ice Shopping Cart v2

All, We have not released this for the past week at the vendors request. This was to enable them to notify all registered users about this vulnerability and to provide a work around. We have taken the unusual step of including the vendors response to our original advisory release in full. This wa...

DST2K0036.txt

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 22/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0035.txt

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 22/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

Smartwin Technology CyberOffice Shopping Cart 2.0 - Price Modification

Smartwin Technology CyberOffice Shopping Cart 2.0 - Price Modification source: https://www.securityfocus.com/bid/1733/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. The order form CyberOffice Shoppi...

SmartWin CyberOffice Shopping Cart 2.0 - Client Information Disclosure

SmartWin CyberOffice Shopping Cart 2.0 - Client Information Disclosure source: https://www.securityfocus.com/bid/1734/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. It is possible for a remote user ...

SmartWin CyberOffice Shopping Cart 2.0 - Client Information Disclosure

source: https://www.securityfocus.com/bid/1734/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. It is possible for a remote user to gain read access to the private directory on a website running...

Smartwin Technology CyberOffice Shopping Cart 2.0 - Price Modification

source: https://www.securityfocus.com/bid/1733/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. The order form CyberOffice Shopping Cart utilizes can be easily modified by downloading the form locally...

CVE-2000-0396

The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files...

CVE-2000-0396

CVE-2000-0396 affects the add.exe component of the Carello shopping cart software. The vulnerability allows remote attackers to duplicate files on the server, which could enable reading source code of web scripts such as .ASP files. The NVD entry lists a MEDIUM base score (5.0) with network impac...

CVE-2000-0635

The viewpage.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0401

Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string...

Переполнение буфера в PDG Cart

Классические переполнения в нескольких приложениях...

Alert: PDG Cart Overflows

Cerberus Information Security Advisory CISADV000525 http://www.cerberus-infosec.co.uk/advisories.html Released : 25th May 2000 Name : PDGSoft Shopping Cart buffer overflows Affected Systems : UNIX/NT Web servers with PDGSoft's Cart. Issue : Remote attackers can execute arbitrary code Description...

Дырка в Carello shopping cart

Можно создавать файл на сервере или переименовывать существующие файлы. Таким образом можно, нпример, получить исходные тексты .asp - файла...

CVE-2000-0396

The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files...

Pacific Software Carello 1.2.1 - File Duplication / Source Disclosure

source: https://www.securityfocus.com/bid/1245/info A remote user can gain read and write access on a target machine running Carello shopping cart software. First, a user may create a duplicate of a known file in a known directory on the target host through add.exe in /scripts/Carello. Accessing...

CVE-2000-0401

Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string...

CVE-2000-0254

The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables...

Dansie Shopping Cart 3.0.4 - Multiple Vulnerabilities

Dansie Shopping Cart 3.0.4 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/1115/info Appending specific variables and values to http://target/cgi-bin/cart.pl? will allow remote users to perform certain actions. "vars" will display the configuration settings of the application...