ProductCart Multiple Scripts SQL Injection

The remote host is running a version of the ProductCart shopping cart software that fails to properly sanitize user-supplied input before using it in SQL queries. An attacker may be able to exploit these flaws to alter database queries, disclose sensitive information, or conduct other such attack...

Qualiteam X-Cart Multiple Vulnerabilities

The remote host is running X-Cart, a PHP-based shopping cart system. The version installed on the remote host suffers from numerous SQL injection and cross-site scripting vulnerabilities. Attackers can exploit the former to influence database queries, resulting possibly in a compromise of the...

CVE-2005-1789

CVE-2005-1789 describes an SQL injection in the SignIn.asp component of the India Software Solution shopping cart. The vulnerability permits remote attackers to inject arbitrary SQL via the password field, potentially impacting authentication and database integrity. The CVSS2 base score is 7.5 (H...

CVE-2005-1822

Qualiteam X-Cart 4.0.8 is affected by multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL commands via various parameters (home.php: cat, printable; product.php: productid, mode; error_message.php: id; help.php: section; orders.php: mode; register.ph...

CVE-2005-1789

SQL injection vulnerability in SignIn.asp in India Software Solution shopping cart allows remote attackers to execute arbitrary SQL commands via the password...

CVE-2005-1822

Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 printable parameter to home.php, 3 productid or 4 mode parameter to product.php, 5 id parameter to errormessage.php, 6 section parameter to help.php, 7 mode...

CVE-2005-1823

Multiple cross-site scripting XSS vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 cat or 2 printable parameter to home.php, 3 productid or 4 mode parameter to product.php, 5 id parameter to errormessage.php, 6 section parameter to...

CVE-2005-1823

CVE-2005-1823 refers to multiple cross-site scripting (XSS) flaws in Qualiteam X-Cart 4.0.8. The provided documents specify vulnerable vectors within X-Cart’s PHP files, including parameters to home.php (cat, printable), product.php (productid, mode), error_message.php (id), help.php (section), o...

CVE-2005-1823

Multiple cross-site scripting XSS vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 cat or 2 printable parameter to home.php, 3 productid or 4 mode parameter to product.php, 5 id parameter to errormessage.php, 6 section parameter to...

CVE-2005-1822

Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 printable parameter to home.php, 3 productid or 4 mode parameter to product.php, 5 id parameter to errormessage.php, 6 section parameter to help.php, 7 mode...

ecart11.txt

------=Part73424926651.1114105332381 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=...

CVE-2005-1822: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 printable parameter to home.php, 3 productid or 4 mode parameter to product.php, 5 id parameter to errormessage.php, 6 section parameter to help.php, 7 mode...

CVE-2005-1823: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 cat or 2 printable parameter to home.php, 3 productid or 4 mode parameter to product.php, 5 id parameter to errormessage.php, 6 section parameter to...

CVE-2005-1789: Undefined Security Weakness

SQL injection vulnerability in SignIn.asp in India Software Solution shopping cart allows remote attackers to execute arbitrary SQL commands via the password...

Multiple vulnerabilities in x-cart Gold

SVadvisory7 Title: Multiple vulnerabilities in x-cart Gold The program: x-cart Gold The vulnerable version: 4.0.8 Homepage: www.x-cart.com Vulnerability is found: 29.05.05 Has found: CENSORED / SVT / www.svt.nukleon.us ===================================================================== The...

Многочисленные уязвимости в x-cart Gold

SVadvisory7 Title: Многочисленные уязвимости в x-cart Gold Программа: x-cart Gold Уязвимая версия: 4.0.8 Homepage: www.x-cart.com Найдена уязвимость: 29.05.05 Нашел: CENSORED / SVT / www.svt.nukleon.us ===================================================================== Описание. ^^^^^^^^^ SQL -...

Qualiteam X-Cart 4.0.8 - orders.php?mode SQL Injection

Qualiteam X-Cart 4.0.8 - orders.php?mode SQL Injection source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabiliti...

Qualiteam X-Cart 4.0.8 - register.php?mode Cross-Site Scripting

Qualiteam X-Cart 4.0.8 - register.php?mode Cross-Site Scripting source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These...

Qualiteam X-Cart 4.0.8 - search.php?mode Cross-Site Scripting

Qualiteam X-Cart 4.0.8 - search.php?mode Cross-Site Scripting source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These...

Qualiteam X-Cart 4.0.8 - help.php?section SQL Injection

Qualiteam X-Cart 4.0.8 - help.php?section SQL Injection source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These...