5962 matches found
CVE-2007-2997: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in cgi-bin/reorder2.asp in SalesCart Shopping Cart allow remote attackers to execute arbitrary SQL commands via the password field and other unspecified vectors. NOTE: the vendor disputes this issue, stating "We were able to reproduce this sql injection on a...
CACTUSHOP 6 Default Installation Allows Remote Database Disclosure
Cactushop V6 allows remote users to download the database which contains creditcard numbers and critical information. The affected carts default installation gives away the path to database file. As a result, an attacker exploiting this vulnerability will be able to obtain detailed private custom...
Dansie Cart Script Exploit Reported
Synopsis : This program -deliberately- allows arbitrary commands to be executed on the victim server. One of our clients, while installing and configuring the Dansie Shopping Cart, ran into difficulty integrating PGP, the shopping cart program, and our secure server setup. While trying to assist...
SalesCart Shopping Cart Reorder2.ASP SQL注入漏洞
SalesCart Shopping Cart是一款基于ASP的WEB应用程序。 SalesCart Shopping Cart不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Reorder2.ASP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 SalesCart Shopping Cart 目前没有解决方案提供： http://www.salescart.com/...
Cross site scripting
Cross-site scripting XSS vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the type parameter...
CVE-2007-2790
Cross-site scripting XSS vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the type parameter...
CVE-2007-2790
VP-ASP Shopping Cart 6.50 (and possibly earlier) has a Cross-Site Scripting (XSS) vulnerability in shopcontent.asp, exploitable via the type parameter. The issue is described across multiple sources as a remote attacker can inject arbitrary web script/HTML by supplying a crafted type value, with ...
CVE-2007-2790
Cross-site scripting XSS vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the type parameter...
CVE-2007-2790: Undefined Security Weakness
Cross-site scripting XSS vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the type parameter...
vpasp-xss.txt
VP-ASP Shopping Cart 6.50 - Cross-Site Scripting Vulnerability VP-ASP Shopping Cart 6.50 - Cross-Site Scripting Vulnerability discovered by John Martinelli of RedLevel Security Google d0rk: intitle:"VP-ASP Shopping Cart 6.50" file shopcontent.asp - variable type - method get "...
VP-ASP Shopping Cart 6.50 - ShopContent.asp Cross-Site Scripting
VP-ASP Shopping Cart 6.50 - ShopContent.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/24033/info VP-ASP Shopping Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue t...
VP-ASP Shopping Cart 6.50 - 'ShopContent.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24033/info VP-ASP Shopping Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...
CVE-2007-2559
Multiple PHP remote file inclusion vulnerabilities in american cart 3.5 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php, 2 checkout.php, and 3 libsecure.php...
CVE-2007-2559
CVE-2007-2559 affects American Cart 3.5. It describes multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code by supplying a URL in the abs_path parameter to index.php, checkout.php, or libsecure.php. The vulnerability is tied to how abs_path is pro...
CVE-2007-2559
Multiple PHP remote file inclusion vulnerabilities in american cart 3.5 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php, 2 checkout.php, and 3 libsecure.php...
Sql injection
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 c or 2 quantity parameter...
Code injection
Unspecified vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 has unknown impact and an l remote attack vector, related to "Cookie Manipulation."...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to inject arbitrary web script or HTML via the l parameter...