CVE-2009-4321

Zen Cart CVE-2009-4321 affects extras/curltest.php in Zen Cart 1.3.8/1.3.8a (and possibly other versions), allowing remote attackers to read arbitrary local files via a file:// URI. The root cause cited is insufficient sanitization of user-supplied data, enabling information disclosure through th...

CVE-2009-4317

Cross-site scripting XSS vulnerability in index.php in ScriptsEz Ez Cart allows remote attackers to inject arbitrary web script or HTML via the sid parameter in a showcat action...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in ScriptsEz Ez Cart allows remote attackers to inject arbitrary web script or HTML via the sid parameter in a showcat action...

CVE-2009-4317

CVE-2009-4317 describes a Cross-site scripting (XSS) vulnerability in index.php of ScriptsEz Ez Cart. The issue allows remote attackers to inject arbitrary web script or HTML via the sid parameter in a showcat action, potentially affecting user sessions and page content. The NVD entry records a C...

CVE-2009-4317

Cross-site scripting XSS vulnerability in index.php in ScriptsEz Ez Cart allows remote attackers to inject arbitrary web script or HTML via the sid parameter in a showcat action...

Ez Cart - index.php Cross-Site Scripting

Ez Cart - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41696/info Ez Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

Ez Cart - sid Cross-Site Scripting

Ez Cart - sid Cross-Site Scripting source: https://www.securityfocus.com/bid/37311/info Ez Cart is prone to is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

phpShop Detection

The remote host is running phpShop, a web-based shopping cart application written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid43157; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"phpShop...

Ez Cart Cross Site Scripting

========================= Author : anti-gov contact: anti-govathotmail.com ========================= script:Ez Cart vendor:http://www.scriptsez.net Exploit: http://localhost/index.php?action=showcat&cid=1&sid=XSS demo: http://www.scriptsez.com/ezcartdemo/index.php?action=showcat&cid=1&sid="alert1...

Ez Cart - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41696/info Ez Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Ez Cart - 'sid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37311/info Ez Cart is prone to is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Interspire Shopping Cart - Full Path Disclosure

Interspire Shopping Cart - Full Path Disclosure Exploit Title: Interspire Shopping Cart Full Path Disclosure Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.interspire.com/ Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | |...

Interspire Shopping Cart Full Path Disclosure

No description provided by source. Exploit Title: Interspire Shopping Cart Full Path Disclosure Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.interspire.com/ Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || ...

Interspire Shopping Cart Full Path Disclosure

Exploit for unknown platform in category web applications ============================================= Interspire Shopping Cart Full Path Disclosure ============================================= Exploit Title: Interspire Shopping Cart Full Path Disclosure Date: 13-12-2009 Author: Mr.aFiR Softwar...

Interspire Shopping Cart - Full Path Disclosure

Exploit Title: Interspire Shopping Cart Full Path Disclosure Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.interspire.com/ Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || \ // \ | | | || | | |/ |/|/ |/...

Zen Cart File Disclosure

Usually, curl is used to connect and retrieve data from a remote URL using the http protocol. However, curl supports a bunch of protocols. One of these protocols is the file protocol. Using this protocol you can read local files by using an URL like file:///etc/passwd. Therefore, if the user can...

Zen Cart extras/curltest.php Information Disclosure

The installed version of Zen Cart includes a test script, 'extras/curltest.php', intended for testing that the curl PHP library is installed and working properly. It fails, though, to restrict access and can be abused to access arbitrary URLs, including local files via the 'file' protocol handler...

Zen Cart local file disclosure vulnerability

Usually, curl is used to connect and retrieve data from a remote URL using the http protocol. However, curl supports a bunch of protocols. One of these protocols is the file protocol. Using this protocol you can read local files by using an URL like file:///etc/passwd. Therefore, if the user can...

PhpShop Detection

This host is running PhpShop, a PHP-powered shopping cart application. OpenVAS Vulnerability Test $Id: phpshopdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ PhpShop Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can redistribut...

Vivid Ads Shopping Cart SQL Injection

$site = 'www.example.com'; Site address $path = '/path'; Folder path $contents = ''; $sock = fsockopen$site, 80, $errno, $errstr, 30; if!$sock echo' ' .$errstr.$errno. ' '."\n"; else $pack = "GET " .$path...