Sql injection

SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action...

CVE-2010-1876

SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action...

CVE-2010-1876

The CVE-2010-1876 entry describes an SQL injection in AJ Shopping Cart 1.0, affecting index.php via the maincatid parameter in the showmaincatlanding action. Root cause appears to be insufficient input validation leading to arbitrary SQL execution by remote attackers; exploitation status is not d...

Cross site scripting

Cross-site scripting XSS vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2009-4856

CVE-2009-4856 describes a cross-site scripting (XSS) vulnerability in the PHP Easy Shopping Cart 3.1R, specifically in subitems.php where the name parameter can be manipulated to inject arbitrary script or HTML. The vulnerability allows remote attackers to execute injected code in the context of ...

CVE-2009-4856

Cross-site scripting XSS vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to inject arbitrary web script or HTML via the name parameter...

Comersus 8 Shopping Cart Cross Site Request Forgery / SQL Injection

Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart Version: Web Application vendor :http://www.comersus.com/index.html Date: 1 apr,2010 Author:Sid3^effects Code : -------------------------------------------------------------------------------------- Sid3^effects aKa Ha...

Comersus 8 Shopping Cart - SQL Injection Cross-Site Request Forgery

Comersus 8 Shopping Cart - SQL Injection Cross-Site Request Forgery Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart Version: Web Application vendor :http://www.comersus.com/index.html Date: 1 apr,2010 Author:Sid3^effects Code :...

Comersus 8 Shopping Cart - SQL Injection / Cross-Site Request Forgery

Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart Version: Web Application vendor :http://www.comersus.com/index.html Date: 1 apr,2010 Author:Sid3^effects Code : -------------------------------------------------------------------------------------- Sid3^effects aKa Ha...

Comersus 8 Shopping Cart SQL Injection and CSRF Vulnerability

Exploit for asp platform in category web applications ============================================================= Comersus 8 Shopping Cart SQL Injection and CSRF Vulnerability ============================================================= Exploit Title:SQL Injection and CSRF Vulnerability in...

Sql injection

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

CVE-2010-1590

Cross-site scripting XSS vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to inject arbitrary web script or HTML via the client's DNS hostname aka the REMOTEHOST variable, related to the CookielessGenerateFilename an...

CVE-2010-1588

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

Directory traversal

Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to determine the existence of arbitrary files via directory traversal sequences in the client's DNS hostname aka the REMOTEHOST variable, related t...

CVE-2010-1590

CVE-2010-1590 is an XSS vulnerability affecting Rocksalt International VP-ASP Shopping Cart (version 6.50 and earlier), exploitable via the REMOTE_HOST DNS hostname. The issue is tied to the CookielessGenerateFilename and CookielessReadFile functions, allowing remote attackers to inject arbitrary...

CVE-2010-1588

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

CVE-2010-1588

CVE-2010-1588 affects Rocksalt International VP-ASP Shopping Cart (version 6.50 and earlier). The vulnerability is a SQL injection in the Getwebsess function (shopsessionsubs.asp) that allows an attacker to modify the websess parameter to execute arbitrary SQL commands. Impact is described as par...

CVE-2010-1589

The CVE-2010-1589 entry concerns Rocksalt International VP-ASP Shopping Cart, version 6.50 and earlier, with a directory traversal vulnerability in shopsessionsubs.asp. The issue arises from manipulation of the REMOTE_HOST (DNS hostname) variable, linked to CookielessGenerateFilename and Cookiele...

Acart 1.0 / 2.0 Shopping Cart Database Disclosure

======================================================================================== | Title : Acart 1.0 Shopping Cart Software Backup Dump Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Bug : Backup ====================== Exploit By indoushka ===============================...

Acart <= 2.0 Shopping Cart Software Backup Dump Vulnerability

Exploit for php platform in category web applications ============================================================= Acart = 2.0 Shopping Cart Software Backup Dump Vulnerability =============================================================...