4980 matches found
more problems with that POS dansie cart software!
if installing a backdoor in the cart software wasn't bad enough.. the whole implimentation of pricing and adding items to cart is crap.. example form to add items to your cart kindly provided on the publishers site using the demo cart they set up for us: snip FORM METHOD=POST...
Dansie Shopping Cart 3.0.4 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/1115/info Appending specific variables and values to http://target/cgi-bin/cart.pl? will allow remote users to perform certain actions. "vars" will display the configuration settings of the application, which includes the username and password used for...
Back Door in Commercial Shopping Cart
Trojanized Commercial Shopping Cart =============================================================== Dansie Shopping Cart Version : 3.04 presumably earlier versions as well Author : Craig Dansie URL : http://www.dansie.net/ Language : Perl both NT and Unix platforms are vulnerable License :...
Dansie Shopping Cart Backdoor Detection
The script /cart/cart.cgi is present. If this shopping cart system is the Dansie Shopping Cart, and if it is older than version 3.0.8 then it is very likely that it contains a backdoor that allows anyone to execute arbitrary commands on this system. C Tenable Network Security, Inc...
CVE-2000-0282
TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. dot dot attack on the webplus CGI program...
CVE-2000-0253
The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields...
CVE-2000-0252
The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable...
CVE-2000-0110
The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...
CVE-2000-0135
CVE-2000-0135 affects the @Retail shopping cart application. NVD notes remote attackers can modify sensitive purchase information via hidden form fields, with a CVSS v2 base score of 7.5 (NETWORK, LOW complexity, NONE auth, partial impact across confidentiality, integrity, and availability). Conn...
CVE-2000-0136
The CVE-2000-0136 entry concerns the Cart32 shopping cart application, where remote attackers can modify sensitive purchase information through hidden form fields. As per the linked documents, this affects Cart32 and is characterized by a network-remote access vector with low attack complexity an...
CVE-2000-0101
The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...
CVE-2000-0123
CVE-2000-0123 describes a vulnerability in the Filemaker shopping cart application where remote attackers can alter sensitive purchase information by manipulating hidden form fields. The available sources confirm the issue exists in the shopping cart component shipped with Filemaker, enabling inf...
CVE-2000-0104
CVE-2000-0104 concerns the Shoptron shopping cart application. The connected PT-2000-1092 entry confirms that remote attackers could modify sensitive purchase information via hidden form fields in the Shoptron cart. The PT entry notes that affected versions are not specified and provides no remed...
CVE-2000-0134
The Check It Out shopping cart application contains a vulnerability that allows remote attackers to modify sensitive purchase information via hidden form fields. Described across CVE-2000-0134 sources, this flaw enables unauthenticated remote access with partial confidentiality and integrity impa...
CVE-2000-0136
The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...
CVE-2000-0135
The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...
CVE-2000-0134
The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...
CVE-2000-0108
The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...