pwned-vpasp.txt

[email protected] presents.. VP-ASP Getting owned. Vulnerable Software: VP-ASP Shopping Cart 5.50, OTHERS Impact: Manipulation of dataSQL Injection ATTACK Credits: Mindy, SlickK, CrazycookieLove you =D, sese Special thanks to Mudavyne for their song "HAPPY". While talking about SQL...

Cross site scripting

Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

Cross site scripting

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...

CVE-2006-0111

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...

CVE-2006-0109

Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-0109

The CVE-2006-0109 entry describes a Cross-site scripting vulnerability in Modular Merchant Shopping Cart, specifically in category.php where the cat parameter can be exploited to inject arbitrary web script or HTML. The vulnerability affects that product/component and arises from unsanitized inpu...

CVE-2006-0111

The CVE-2006-0111 entry describes a Cross-site scripting (XSS) vulnerability in the Boxcar Media Shopping Cart, specifically in index.php. The affected component is the index.php handler, with the vulnerability exploitable via the (1) parent and (2) pg URL parameters. Attackers can inject arbitra...

CVE-2006-0111: Undefined Security Weakness

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...

CVE-2006-0109

Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-0111

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...

CVE-2006-0109: Undefined Security Weakness

Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-0099

PHP remote file include vulnerability in 1 include/templates/categories/default.php and 2 certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter...

Remote file inclusion

PHP remote file include vulnerability in 1 include/templates/categories/default.php and 2 certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter...

EUVD-2006-0107

PHP remote file include vulnerability in 1 include/templates/categories/default.php and 2 certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter...

CVE-2006-0099

CVE-2006-0099 is a PHP remote file include vulnerability in Valdersoft Shopping Cart 3.0. The flaw occurs in (1) include/templates/categories/default.php and (2) other include/templates/categories/ PHP scripts, where an attacker can cause arbitrary code execution by supplying a crafted URL in the...

CVE-2006-0099

PHP remote file include vulnerability in 1 include/templates/categories/default.php and 2 certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter...

CVE-2006-0099: Undefined Security Weakness

PHP remote file include vulnerability in 1 include/templates/categories/default.php and 2 certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter...

Sql injection

SQL injection vulnerability in 1 pages.php and 2 detail.php in Lizard Cart CMS 1.04 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-0087

SQL injection vulnerability in 1 pages.php and 2 detail.php in Lizard Cart CMS 1.04 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-0087

CVE-2006-0087 affects Lizard Cart CMS 1.04. The vulnerability is in (1) pages.php and (2) detail.php, where the id parameter is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. The NVD data lists a base score of 7.5 (HIGH) with network access, low attack c...