5952 matches found
PT-2006-3745 · X Cart · X-Cart
Name of the Vulnerable Software and Affected Versions: X-Cart Gold and Pro versions 4.0.18 through 4.1.0 beta 1 Description: The issue allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field in search.php, when the settings specify only "Search in Detailed...
CVE-2006-2827: Undefined Security Weakness
SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field, when the settings specify only "Search in Detailed description" and "Search also in ISBN." NOTE: the vend...
adv32-K-159-2006.txt
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV32$2006 --------------------------------------------------------------------------- ECHOADV32$2006 SCart 2.0 Remote Code Execution ---------------------------------------------------------------------------...
CS-Cart 1.3.3 - classes_dir Remote File Inclusion
CS-Cart 1.3.3 - classesdir Remote File Inclusion $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 classesdir = Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$...
CS-Cart <= 1.3.3 (classes_dir) Remote File Include Vulnerability
No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 classesdir = Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$...
CS-Cart <= 1.3.3 (classes_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ CS-Cart = 1.3.3 classesdir Remote File Include Vulnerability ================================================================ $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM...
CS-Cart 1.3.3 - 'classes_dir' Remote File Inclusion
$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 classesdir = Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$...
ishopcart cgi 0day and multiple vulnerabilities
Vendor: ishopcart inc Vendor Site: ishopcart.com Vendor Status: notified via telephone While spending a night auditing I have found 2 buffer overflows and 1 directory traversal in the ishopcart cgi, which is written in C. The directory traversal is caused by how the cgi chooses to show pages. If,...
CosmicShoppingCart - search.php SQL Injection
CosmicShoppingCart - search.php SQL Injection Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, th...
PT-2006-3431 · Squirrelcart · Squirrelcart
Name of the Vulnerable Software and Affected Versions: Squirrelcart versions 2.2.2 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the cart isp root parameter in the cart content.php file. Recommendations: For Squirrelcart version...
[SA20121] Squirrelcart "cart_isp_root" File Inclusion Vulnerability
TITLE: Squirrelcart "cartisproot" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA20121 VERIFY ADVISORY: http://secunia.com/advisories/20121/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Squirrelcart PHP Shopping Cart 2.x http://secunia.com/product/9957/...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter in a storespecialoffers.php and b store.php and 2 prodid parameter in c productinfo.php. NOTE: this issue might...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inject arbitrary web script or HTML via the setbackurl parameter...
CVE-2006-2163
Cross-site scripting XSS vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inject arbitrary web script or HTML via the setbackurl parameter...
CVE-2006-2164
Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 categoryid parameter in a storespecialoffers.php and b store.php, and 2 prodid parameter in c cart.php and d productinfo.php. NOTE: this issue also...
CVE-2006-2165
Multiple cross-site scripting XSS vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter in a storespecialoffers.php and b store.php and 2 prodid parameter in c productinfo.php. NOTE: this issue might...
Sql injection
Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 categoryid parameter in a storespecialoffers.php and b store.php, and 2 prodid parameter in c cart.php and d productinfo.php. NOTE: this issue also...
CVE-2006-2163
CVE-2006-2163 is an XSS vulnerability in Pinnacle Cart (versions up to 3.33 and earlier) where the setbackurl parameter in index.php can be exploited to inject arbitrary script/HTML. The root cause is unvalidated/unsanitized input propagated to the browser. Affected software is Pinnacle Cart 3.33...
CVE-2006-2164
CVE-2006-2164 affects Avactis Shopping Cart 0.1.2 and earlier, with SQL injection via the parameters category_id in (a) store_special_offers.php and (b) store.php, and prod_id in (c) cart.php and (d) product_info.php. The issue may also cause full path disclosure from invalid SQL queries. No expl...
