5962 matches found
CKGold Shopping Cart 2.0 (category.php) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== CKGold Shopping Cart 2.0 category.php Blind SQL Injection Exploit =================================================================== !/usr/bin/perl use LWP::UserAgent; us...
JVN#20452446 Shopping Basket Pro directory traversal vulnerability
Shopping Basket Pro from CGI RESCUE is shopping cart software. A directory traversal vulnerability exists in Shopping Basket Pro. Impact A remote attacker could obtain a list of the file and directory names on the server where Shopping Basket Pro is installed. Solution Update the Software Apply t...
Sql injection
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to execute arbitrary SQL commands via the scid parameter in a searchlist action, a different vector than CVE-2007-2549...
CVE-2007-4597
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to execute arbitrary SQL commands via the scid parameter in a searchlist action, a different vector than CVE-2007-2549...
CVE-2007-4597
Technical details about CVE-2007-4597 are not publicly provided in the supplied connected documents; monitor for updates.
CVE-2007-4597: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to execute arbitrary SQL commands via the scid parameter in a searchlist action, a different vector than CVE-2007-2549...
SunShop Shopping Cart 4.0 RC 6 - Search Blind SQL Injection
SunShop Shopping Cart 4.0 RC 6 - Search Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "\n \'/ "; print "\n -.- "; print "\n -----------------oOO------OOo------------------"; print "\n | SunShop v4.0 RC 6 search Blind SQL Injection |"; print "\n | k1tk4t ...
SunShop Shopping Cart 4.0 RC 6 - 'Search' Blind SQL Injection
!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "\n \'/ "; print "\n -.- "; print "\n -----------------oOO------OOo------------------"; print "\n | SunShop v4.0 RC 6 search Blind SQL Injection |"; print "\n | k1tk4t - Indonesia - newhackdotorg |"; print "\n | coded by DNX...
CVE-2007-4121
CVE-2007-4121 relates to multiple SQL injection flaws in admin.aspx across three scripts: E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script. The vulnerability allows remote attackers to inject SQL via the EmailAdd (Username) and Pass (password) parameters, po...
CVE-2007-4121: Undefined Security Weakness
Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the 1 EmailAdd Username and 2 Pass password parameters. NOTE: some of these details are...
E-commerceScripts ALL Apps (Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script) admin.aspx SQL
A R I A - S E C U R I T Y Vendor: http://www.e-commercescripts.com/dotnet/ E-commerceScripts ALL Apps Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script admin.aspx SQL Injection Username: anything' OR 'x'='x password: whatever you want or anything' OR 'x'='x Credits: Aria-Securit...
Session fixation
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...
CVE-2007-3597
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...
CVE-2007-3597
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...
CVE-2007-3597
CVE-2007-3597 describes a session fixation vulnerability in Zen Cart 1.3.7 and earlier, where an attacker can hijack web sessions by setting the Cookie parameter. The affected software is Zen Cart (versions up to and including 1.3.7); the underlying issue is that session identifiers can be preset...
CVE-2007-3597: Improper Authentication
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...
Session fixation in Zen Cart CMS
==================================================================================== Team Intell Security Advisory TISA2007-05 ------------------------------------------------------------------------------------ Zen Cart 1.3.7 - Session fixation Issue in backend Administration interface...
Sql injection
SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the "basic search box." NOTE: 4.0.2 and other versions might also be affected...