CVE-2012-5807

Technical details (affected product/version, root cause, exploitability, impact, and fixes) are not provided in the connected documents. Monitor for updates.

CVE-2012-5805

The CVE-2012-5805/5806 family concerns Zen Cart PayPal integration (IPN for CVE-5805; Payments Pro for CVE-5806). Both describe failure to verify that the server hostname matches a domain in the certificate’s Common Name or subjectAltName, enabling MITM spoofing with any valid certificate. Underl...

CVE-2012-5225

Cross-site scripting XSS vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the shoppingurl parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the shoppingurl parameter...

CVE-2012-5225

Cross-site scripting XSS vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the shoppingurl parameter...

CVE-2012-5225

CVE-2012-5225 concerns a cross-site scripting (XSS) vulnerability in the webscr.php component of xClick Cart versions 1.0.1 and 1.0.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the shopping_url parameter. The public sources describe the affected product and vulne...

Sql injection

SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-5198

CVE-2011-5198 is a confirmed SQL injection in the Neturf eCommerce Shopping Cart, targeting the search.php endpoint. The vulnerability allows remote attackers to append arbitrary SQL via the SearchFor parameter (no authentication required, network access). CVSS v2 metrics indicate a base score of...

CVE-2011-5198

SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...

Ez Cart - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Webify eDownloads Cart Arbitrary File Deletion Vulnerability

Exploit for php platform in category web applications !x! Informations: Name : Webify edownloads cart Download : http://www.webify.ws/edownloadscart Vulnerability : Delete Arbitrary File VulnerabilityAuthor : JIKOJAWAD Contact : email protected Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM...

Webify eDownloads Cart Arbitrary File Deletion

!x! Informations: Name : Webify edownloads cart Download : http://www.webify.ws/edownloadscart Vulnerability : Delete Arbitrary File VulnerabilityAuthor : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM Miss !x! Bug: Delete Arbitrary File Vulnerability...

Webify eDownloads Cart - Arbitrary File Deletion

!x! Informations: Name : Webify edownloads cart Download : http://www.webify.ws/edownloadscart Vulnerability : Delete Arbitrary File VulnerabilityAuthor : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM Miss !x! Bug: Delete Arbitrary File Vulnerability...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...

CVE-2012-2116

Cross-site request forgery CSRF vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...

TomatoCart 1.1.7 Cross Site Scripting

------------------------------------------------------------- Name : TomatoCart 1.1.7 XSS ------------------------------------------------------------- Date : 29.08.2012 ------------------------------------------------------------- Site : www.tomatocart.com...

RV Shopping Cart Cross Site Request Forgery

Exploit Title: RV Shopping cart CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

RV Shopping Cart - Cross-Site Request Forgery

RV Shopping Cart - Cross-Site Request Forgery Exploit Title: RV Shopping cart CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

RV Shopping Cart - Cross-Site Request Forgery

Exploit Title: RV Shopping cart CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

Bitcart Remote File Upload

Exploit for php platform in category web applications Exploit Title: Bitcart Remote File Upload Date: 23/08/2012 Author: DaOne @LibyanCA Vendor: http://www.bit-cart.com/ Price: $399 Google dork: intext:"Shopping cart developed By Bitwords Media" Exploit http://site.com/upload.php Find Your Ev!L o...