CVE-2019-25507: Improper Neutralization of Special Elements used in an SQL Command

Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'shop' parameter. Attackers can send GET requests to index.php with malicious 'shop' values using UNION-based SQL injection t...

CVE-2019-25391: Improper Neutralization of Special Elements used in an SQL Command

Ashop Shopping Cart Software contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through the blacklistitemid parameter. Attackers can send POST requests to the admin/bannedcustomers.php endpoint with crafted SQL payloads using SLEEP functio...

CS-Cart Multi-Vendor Authentication Bypass

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability allows a malicious actor to remotely compromise the integrity and accessibility of protected information...

SPA-Cart Security Breach

SPA-Cart is a shopping cart software from SPA-Cart, Inc. A security vulnerability exists in SPA-Cart version 1.9.0.6, which stems from an incorrect manipulation of the parameter email that can lead to observable behavioral differences...

Ashop Shopping Cart Software - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Ashop Shopping Cart Software - SQL Injection Exploit Author: Doğukan Karaciğer Vendor Homepage: http://www.ashopsoftware.com Software Link: https://sourceforge.net/projects/ashop/ Demo Site: http://demo.ashopsoftware.com/ Versio...

Ashop Shopping Cart Software - 'bannedcustomers.php?blacklistitemid' SQL Injection

Exploit Title: Ashop Shopping Cart Software - SQL Injection Date: 08.04.2019 Exploit Author: Doğukan Karaciğer Vendor Homepage: http://www.ashopsoftware.com Software Link: https://sourceforge.net/projects/ashop/ Demo Site: http://demo.ashopsoftware.com/ Version: Lastest Tested on: Ubuntu-trusty-6...

Ashop Shopping Cart Software - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Ashop Shopping Cart Software - SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: http://www.ashopsoftware.com Software Link: https://sourceforge.net/projects/ashop/ Demo Site: http://demo.ashopsoftware.com/ Versio...

CS-Cart Unauthenticated XXE Vulnerability

CS-Cart is a PHP and MySQL based e-commerce software system developed by CS-Cart team. The system supports third-party software extensions, customized promotional strategies, product filtering definitions and more. A security vulnerability exists in several pages of CS-Cart version 4.3.10, which...

Ktools Photostore 4.7.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Ktools Photostore = 4.7.5 Multiple Vulnerabilities Bug discovered by Yakir Wizman Date 01/07/2016 Affected versions prior to 4.7.5 Vendor Homepage - http://www.ktools.net...

3d Cart Cross Site Scripting

Affected software: 3d cart Type of vulnerability: xss URL: http://3dcart.com/ Discovered by: Provensec Website: http://www.provensec.com Description: Hosted Shopping Cart Software to Build an Online Store Proof of concept /admin/usersview.asp?error=%3Cimg/src=%22x%3E%22onerror=...

Asp - comersus7F Shopping Cart Software Backup Dump Vulnerability

No description provided by source. ======================================================================================== | Title : Asp - comersus7F Shopping Cart Software Backup Dump Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Bug : Database Disclosure ====================...

Jewelry Cart Software (product.php) SQL Injection Vulnerability

No description provided by source. Name : Jewelry Cart Software SQL Injection product.php ::- Author : Asyraf Mycrypto Security Force r0x!! Date : 20/3/2010 Language : PHP Script : Jewelry Cart Software Shout : hMSecurity,n3wb0rn,TBD Security Dork : Powered by Jewelry Cart Software...

CubeCart 5.0.7 Insecure Backup Handling

OVERVIEW CubeCart 5.0.7 and lower versions are vulnerable to Insecure Backup File Handling which leads to the disclosure of the application configuration file. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that...

TomatoCart 1.1.7 Cross Site Scripting

------------------------------------------------------------- Name : TomatoCart 1.1.7 XSS ------------------------------------------------------------- Date : 29.08.2012 ------------------------------------------------------------- Site : www.tomatocart.com...

iDevSpot iDevCart 1.10 - Multiple Local File Inclusions

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- iDevSpot...

Mercantec SoftCart - CGI Overflow (Metasploit)

$Id: mercantecsoftcart.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ezRESERVATION by Pass / Creat and Download Backup Vulnerability

Exploit for php platform in category web applications =============================================================== ezRESERVATION by Pass / Creat and Download Backup Vulnerability ===============================================================...

ezAPPAREL by Pass / Creat and Download Backup Vulnerability

Exploit for php platform in category web applications =========================================================== ezAPPAREL by Pass / Creat and Download Backup Vulnerability ===========================================================...

Jewelry Cart SQL Injection

Name : Jewelry Cart Software SQL Injection product.php ::- Author : Asyraf Mycrypto Security Force r0x!! Date : 20/3/2010 Language : PHP Script : Jewelry Cart Software Site : http://jewelrycartsoftware.com/ Shout : hMSecurity,n3wb0rn,TBD Security Dork : Powered by Jewelry Cart Software...

Jewelry Cart Software - product.php SQL Injection

Jewelry Cart Software - product.php SQL Injection Name : Jewelry Cart Software SQL Injection product.php ::- Author : Asyraf Mycrypto Security Force r0x!! Date : 20/3/2010 Language : PHP Script : Jewelry Cart Software Shout : hMSecurity,n3wb0rn,TBD Security Dork : Powered by Jewelry Cart Software...