Cross site scripting

Cross-site scripting XSS vulnerability in zcinstall/includes/modules/pages/databasesetup/headerphp.php in Zen Cart 1.5.0 and earlier, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the dbusername parameter to zcinstall/index.php...

CVE-2012-1413

Zen Cart CVE-2012-1413 affects Zen Cart 1.5.0 and earlier during installation. The XSS flaw resides in zc_install/includes/modules/pages/database_setup/header_php.php, exploitable via the db_username parameter to zc_install/index.php, allowing remote script/HTML injection. No exploit details or m...

CVE-2012-1413

Cross-site scripting XSS vulnerability in zcinstall/includes/modules/pages/databasesetup/headerphp.php in Zen Cart 1.5.0 and earlier, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the dbusername parameter to zcinstall/index.php...

Lizard-Cart 1.04 search.php sql注入漏洞

No description provided by source...

Zen Cart 1.3.9f LFI

Local file include vulnerability in Zen Cart typefilter parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Zen Cart 1.3.8a File Upload

File upload vulnerability in Zen Cart Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Fortune3 Cross Site Scripting

Exploit Title: Fortune3 Cross Site Scripting Date: 18.04.2012 Author: Sony Software Link: http://www.fortune3.com/ Google Dorks: Powered by FORTUNE3 Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/04/fortune3-cross-site-scripting.html...

Bonza-Cart E-Commerce - SQLi/XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

CATSHOP Cart Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Boomerank CMS WebShop-module SQL Injection

Exploit for php platform in category web applications Exploit Title: Boomerank CMS WebShop-module SQL Injection Vuln. Date: 28.03.2012 Google Dork: inurl:"vozicek-dodaj.html?id=" site:.si Author: Mr.5p0ng3 email protected Software Link: www.boomerank.net Author's website Version: All Tested on:...

CoreCommerce SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : CoreCommerce SQL injection Date : 22/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : http://www.corecommerce.com Version : 3.0 d0rk : intext:"Powered by Core-Commerce"...

PRE PRINTING STUDIO - SQL Injection

Exploit Title: PRE PRINTING STUDIO Sql Injection Date: 16/03/2012 Author: r45c4l Email: [email protected] Script url: http://www.preprojects.com/preprojects/printing.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

CATSHOP Cart - XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

LY Network Cart - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Zen Cart v.1.5.0 Remote Shell Upload

Exploit for php platform in category web applications Remote Shell Upload Vulnerability DaTe : 5.3.2012 Version : 1.5.0 Tested on: Linux " Ubuntu " , "win 7" Author : Mr.ExiT OrPh4n Email : email protected Site : sh4ck.com + v99x.com Dork : "Powered by Zen Cart" Software Link:...

lizard cart - search.php SQL Injection

lizard cart - search.php SQL Injection Exploit Title: lizard cart SQLi search.php Google Dork: inurl:search.php+intitle:"Lizard Cart"+intext:"Search Results:" Date: 05-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/lizardcart/files/latest/download?source=directory Version...

Lizard Cart SQL Injection

Exploit Title: lizard cart SQLi search.php Google Dork: inurl:search.php+intitle:"Lizard Cart"+intext:"Search Results:" Date: 05-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/lizardcart/files/latest/download?source=directory Version: pp104 Tested on: Windows Usage:...

lizard cart - 'search.php' SQL Injection

Exploit Title: lizard cart SQLi search.php Google Dork: inurl:search.php+intitle:"Lizard Cart"+intext:"Search Results:" Date: 05-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/lizardcart/files/latest/download?source=directory Version: pp104 Tested on: Windows Usage:...

Interspire Shopping Cart Insecure Permissions

========= Product: Interspire Shopping Cart ========= Problem: config/config.php MUST be httpd-readable inter-domain read access permitted, which is a problem on shared hosting ========= About product: What is Interspire Shopping Cart? Interspire Shopping Cart is the most feature rich, all-in-one...

Zen Cart 'path_to_admin/product.php'跨站请求伪造漏洞

Bugtraq ID: 51968 CVE ID：CVE-2011-4403 Zen Cart是一款免费的购物车软件。 Zen Cart管理控制面板存在跨站请求伪造漏洞，攻击者提交特制表单，可以管理员权限删除或禁用产品等。 0 Zen Cart 1.3.9h 厂商解决方案 目前没有详细解决方案提供： http://www.zen-cart.com/ form name="products" action=" http://www.mysite.com/pathtoadmin/product.php?action=deleteproductconfirm"; method="post"...