Dansie Shopping Cart Discloses Installation Path to Remote Users

Indonesia Security Development Team Advisory Dansie Shopping Cart Discloses Installation Path to Remote Users ================================================================ Advisory Name: Dansie Shopping Cart Discloses Installation Path to Remote Users Release Date: 5:21 AM 10/20/03 Application...

[UNIX] A-CART and A-CART Pro XSS Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Alan Ward A-Cart 2.0 - MSG Cross-Site Scripting

source: https://www.securityfocus.com/bid/8722/info A-Cart has been reported prone to a cross-site scripting vulnerability. The issue presents itself likely due to a lack of sufficient sanitization performed on data contained in the 'msg' URI parameter that is passed to signin.asp. An attacker...

Alan Ward A-Cart 2.0 - MSG Cross-Site Scripting

Alan Ward A-Cart 2.0 - MSG Cross-Site Scripting source: https://www.securityfocus.com/bid/8722/info A-Cart has been reported prone to a cross-site scripting vulnerability. The issue presents itself likely due to a lack of sufficient sanitization performed on data contained in the 'msg' URI...

CVE-2002-1352

Per Magne Knutsen's CartMan shopping cart cartman.php 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter...

CVE-2002-1352

The CVE-2002-1352 entry concerns Magne Knutsen’s CartMan shopping cart (cartman.php) version 1.04 and earlier. The vulnerability allows remote attackers to modify product prices by altering the price parameter. The connected CVE sources (NVD/CVE records) confirm the affected component and the und...

CVE-2002-1352

Per Magne Knutsen's CartMan shopping cart cartman.php 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter...

CVE-2002-1352: Undefined Security Weakness

Per Magne Knutsen's CartMan shopping cart cartman.php 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter...

ZH2003-16SA (security advisory): C-Cart Shopping Cart Path Disclosure

ZH2003-16SA security advisory: C-Cart Shopping Cart Path Disclosure Published: 8 august 2003 Released: 8 august 2003 Name: C-Cart Affected Systems: 1.0 Issue: Remote attackers can know the path of the site Author: [email protected] Vendor: http://www.polyspaston.com Description Zone-h Security...

C-Cart 1.0 - Full Path Disclosure

source: https://www.securityfocus.com/bid/8368/info C-Cart is prone to a path disclosure vulnerability. Passing invalid data as a URI parameter to several C-Cart scripts will cause an error message to be displayed, which contains installation path information...

C-Cart 1.0 - Full Path Disclosure

C-Cart 1.0 - Full Path Disclosure source: https://www.securityfocus.com/bid/8368/info C-Cart is prone to a path disclosure vulnerability. Passing invalid data as a URI parameter to several C-Cart scripts will cause an error message to be displayed, which contains installation path information...

QuadComm Q-Shop 2.5 - Failure To Validate Credentials

QuadComm Q-Shop 2.5 - Failure To Validate Credentials source: https://www.securityfocus.com/bid/8153/info Zone-H has reported that the Q-Shop ASP shopping cart software contains a vulnerability that may allow remote attackers to upload arbitrary files. Once uploaded, the attacker may be able to...

PDGSoft Shopping Cart Multiple Vulnerabilities

The executables 'redirect.exe' and/or 'changepw.exe' exist on this web server. Some versions of these files are vulnerable to remote exploit. An attacker can use this hole to gain access to confidential data or escalate their privileges on the web server. As Nessus solely relied on the existence ...

StockMan Shopping Cart shop.plx Path Disclosure

The remote host is running the StockMan shopping cart. There is a flaw in this version that could allow an attacker to obtain the physical path to the remote web root by requesting a non-exisant page through the 'shop.plx' CGI. An attacker may use this flaw to gain more knowledge about the setup...

StockMan Shopping Cart shop.plx page Parameter Arbitrary Command Execution

The remote host is running the StockMan shopping cart. According to the version number of the CGI shop.plx, there is a flaw in this installation that could allow an attacker to execute arbitrary commands on this host, and which could also allow him to obtain your list of customers or their credit...

Stockman Shopping Cart 7.8 - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/7485/info Stockman Shopping Cart has been reported prone to a remote command execution vulnerability. This issue presents itself in the 'shop.plx' script. The problem results from a lack of sufficient sanitization performed on user supplied URI parameters...

Stockman Shopping Cart 7.8 - Arbitrary Command Execution

Stockman Shopping Cart 7.8 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/7485/info Stockman Shopping Cart has been reported prone to a remote command execution vulnerability. This issue presents itself in the 'shop.plx' script. The problem results from a lack of sufficie...

Multiple vulnerabilities in AutomatedShops WebC shopping cart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Vulnerability Advisory Product: WebC shopping cart Versions: 2.011 - 5.005 Vulnerable to all exploits 5.010 vulnerable to local exploit Vendor: Automated Shops http://www.automatedshops.com Platforms: Linux/FreeBSD/Win32 Impact: Remote code...

AutomatedShops webc.cgi Installation Detection

The remote host is running webc.cgi, a shopping cart application. By default, webc.cgi sends some information to every user, including its version number, serial number and company name. This script extracts this information and displays it to the user. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2002-2303

3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data...