5950 matches found
CVE-2005-2476
Cross-site scripting XSS vulnerability in lostpassowrd.php in Naxtor Shopping Cart 1.0 allows remote attackers to inject arbitrary web script or HTML via the email parameter...
CVE-2005-2476
CVE-2005-2476 affects Naxtor Shopping Cart 1.0, specifically the lost_passowrd.php file. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the email parameter. The NVD entry lists a base score of 4.3 (Medium) with networ...
naxtorShop.txt
Hello All, I have discovered a couple of remote vulnerabilities in: Naxtor Shopping Cart 1.0 Authors Site: http://www.naxtor.com.au/ Naxtor is described by its authors as: Naxtor Shopping Cart is one stop solution for companies' interested in selling merchandise online...
CVE-2005-2477: Undefined Security Weakness
shopdisplayproducts.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive information via a catid with a "'" single quote, which reveals the path in an error message, possibly due to an SQL injection vulnerability...
CVE-2005-2476: Undefined Security Weakness
Cross-site scripting XSS vulnerability in lostpassowrd.php in Naxtor Shopping Cart 1.0 allows remote attackers to inject arbitrary web script or HTML via the email parameter...
CVE-2005-2445
SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands via the idcategory parameter...
CVE-2005-2445
CVE-2005-2445 = SQL injection in Product Cart 2.6. The vulnerability is in viewPrd.asp and allows remote attackers to execute arbitrary SQL commands via the idcategory parameter. Documents indicate a remote attacker could alter queries; no exploit details are provided in the sources. No remediati...
CVE-2005-2445
SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands via the idcategory parameter...
CVE-2005-2445: Undefined Security Weakness
SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands via the idcategory parameter...
[NOBYTES.COM: #8] Naxtor Shopping Cart 1.0 - Information Disclosure & Possible SQL Injection
Hello All, I have discovered a couple of remote vulnerabilities in: Naxtor Shopping Cart 1.0 Authors Site: http://www.naxtor.com.au/ Naxtor is described by its authors as: Naxtor Shopping Cart is one stop solution for companies' interested in selling merchandise online...
Naxtor Shopping Cart 1.0 - Lost_password.php Cross-Site Scripting
Naxtor Shopping Cart 1.0 - Lostpassword.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14454/info Naxtor Shopping Cart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...
Naxtor Shopping Cart 1.0 - Shop_Display_Products.php SQL Injection
Naxtor Shopping Cart 1.0 - ShopDisplayProducts.php SQL Injection source: https://www.securityfocus.com/bid/14456/info Naxtor Shopping Cart is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an S...
Naxtor Shopping Cart 1.0 - 'Lost_password.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14454/info Naxtor Shopping Cart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...
[HSC Security Group] SQL Injection in Product Cart 2.6
Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL Injection in Product Cart 2.6 Risk: Medium to High An SQL injection affects Product Cart 2.6. Database Manipulation is possible. viewPrd.asp?idcategory=' Vendor: http://www.earlyimpact.com/ "Our...
[Full-disclosure] Indiatimes Shopping Cart XSS (Cross Site Scripting) Attacks
Recently, I discovered a major XSS issue with Indiatimes shopping cart. It is one of the largest shopping and auctioning portal in India. The XSS flaw is present in most of the links of the portal however, I am currently reporting only few specific links which are very critical. The vulnerability...
pc26sql.txt
--Alt-Boundary-21084.11145145 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL Injection in Product Cart 2.6 Risk: Medium to High An SQL...
VP-ASP Multiple Script SQL Injection
The remote host is using the VP-ASP, a shopping cart program written in ASP. The remote version of this software contains three SQL injection vulnerabilities in the files shopaddtocart.asp, shopaddtocartnodb.asp and shopproductselect.asp. An attacker may exploit these flaws to execute arbitrary S...
Dragonfly Shopping Cart Multiple vulnerabilities
Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc or even code them. Learn more at http://www.dbtech.org Severity: High Title: Dragonfly Shopping Cart Multiple vulnerabilities Date:...
CVE-2005-2217
Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, allowing remote attackers to obtain sensitive information such as program variables. The issue is classified with a CVSS v2 base score of 5.0 (Network attack vector, Low attack complexity, Confident...