CVE-2006-5119

Multiple cross-site scripting XSS vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the 1 adminname or 2 adminpass parameter in a admin/login.php, or the 3 adminemail parameter in b admin/passwordforgotten.php...

CVE-2006-5119

Zen Cart 1.3.5 is affected by multiple XSS vulnerabilities: remote attackers can inject arbitrary script or HTML via admin_name or admin_pass in admin/login.php, or admin_email in admin/password_forgotten.php. The CVE-2006-5119 entry records this with a MEDIUM base score (CVSSv2). Connected sourc...

CVE-2006-5119: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the 1 adminname or 2 adminpass parameter in a admin/login.php, or the 3 adminemail parameter in b admin/passwordforgotten.php...

Multiple XSS Vulnerabilities in Zen Cart 1.3.5

Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0003 Date: 2006/9/27 Summary: Armorize-ADV-2006-0003 discloses multiple cross-site scripting vulnerabilities that are found in Zen Cart, which is a PHP e-commerce shopping program and is Built on a foundation of OScommerce GPL...

PieCartPro.txt

==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.doodlebabies.com/...

CVE-2006-4967

Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...

CVE-2006-4970

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4969

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

CVE-2006-4970

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4967

CVE-2006-4967 involves NextAge Cart with two XSS vectors: via the CatId parameter in the product category action and the SearchWd parameter in the index search action (index.php). The description indicates remote attackers can inject arbitrary script/HTML. No fixes or detailed remediation are pro...

CVE-2006-4969

CVE-2006-4969 refers to multiple PHP remote file inclusion vulnerabilities in the WAHM E-Commerce Pie Cart Pro. The issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the Inc_Dir parameter across numerous PHP files (e.g., affiliates.php, orders.php, events.php, i...

CVE-2006-4970

The CVE-2006-4970 issue is a PHP remote file inclusion vulnerability in enc/content.php of WAHM E-Commerce Pie Cart Pro. An attacker can cause remote code execution by supplying a crafted URL in the Home_Path parameter. The vulnerability affects WAHM E‑Commerce Pie Cart Pro products as described,...

CVE-2006-4969

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

CVE-2006-4967

Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...

CVE-2006-4967: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...

CVE-2006-4970: Undefined Security Weakness

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4969: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

CharonCartv3.txt

Vulnerability Report Title : Charon Cart v3Review.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.charon.co.uk Exploit; http://target/path/Review.asp?ProductID=SQL HERE Example:...

CVE-2006-4904

CVE-2006-4904 affects Qualiteam X-Cart 4.1.3 and earlier. A vulnerability in the cmpi.php script allows dynamic variable evaluation, permitting an attacker to overwrite arbitrary configuration variables and execute arbitrary PHP code (demonstrated via PHP remote file inclusion using the xcart_dir...

[SA22030] NextAge Cart "CatId" and "SearchWd" Cross-Site Scripting

TITLE: NextAge Cart "CatId" and "SearchWd" Cross-Site Scripting SECUNIA ADVISORY ID: SA22030 VERIFY ADVISORY: http://secunia.com/advisories/22030/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Nextage Cart http://secunia.com/product/12037/ DESCRIPTION: meto5757...