Zen Cart Ecommerce 1.3.8 SQL Injection

!/usr/bin/python ------- Zen Cart 1.3.8 Remote SQL Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : Notes: must have admin/sqlpatch.php enabled clean the databas...

Zen Cart 1.3.8 - Remote Code Execution

!/usr/bin/php | ======================================================================== | | | $system php $argv0 | | Notes: ex: http://victim.com/site no slash | | | ======================================================================== ";exit1; $url = $argv1; $trick = "/passwordforgotten.php"...

Zen Cart 1.3.8 - SQL Execution

!/usr/bin/python ------- Zen Cart 1.3.8 Remote SQL Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : Notes: must have admin/sqlpatch.php enabled clean the databas...

Zen Cart 1.3.8 - SQL Execution

Zen Cart 1.3.8 - SQL Execution !/usr/bin/python ------- Zen Cart 1.3.8 Remote SQL Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : Notes: must have...

Zen Cart 1.3.8 Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================ Zen Cart 1.3.8 Remote Code Execution Exploit ============================================ !/usr/bin/php php $argv0 | | Notes: ex: http://victim.com/site no slash | | |...

ZeusCart 2.3 SQL Injection

!usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: Zeus Cart V 2.3 | -Site: http://www.zeuscart.com/ | -Site Demo: http://www.zeuscart.com/onlinedemo.php?action=skip | -Bug: Sql Injection | -Found: by...

ZeusCart 2.3 - maincatid SQL Injection

ZeusCart 2.3 - maincatid SQL Injection !usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: Zeus Cart V 2.3 | -Site: http://www.zeuscart.com/ | -Site Demo:...

ZeusCart 2.3 - 'maincatid' SQL Injection

!/usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: Zeus Cart V 2.3 | -Site: http://www.zeuscart.com/ | -Site Demo: http://www.zeuscart.com/onlinedemo.php?action=skip | -Bug: Sql Injection | -Found: b...

Infinities eCommerce SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com d3hydr8 - rsauron - baltazar - low1z - houbysoft - beenu and all darkc0de members Author: p47r1ck Home : www.darkc0de.com Email :...

CVE-2008-6759

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to obtain sensitive information via a URL in the POSTDATA parameter to manualssearch.php, which reveals the installation path in an error message...

CVE-2008-6765

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cartname parameter...

Code injection

cartsave.php in ViArt Shop aka Shopping Cart 3.5 allows remote attackers to cause a denial of service excessive shopping carts via a flood of requests...

CVE-2008-6766

cartsave.php in ViArt Shop aka Shopping Cart 3.5 allows remote attackers to cause a denial of service excessive shopping carts via a flood of requests...

CVE-2008-6765

CVE-2008-6765 affects ViArt Shop (aka Shopping Cart) 3.5. The vulnerability allows remote attackers to access the contents of an arbitrary shopping cart by supplying a modified cart_name parameter. The available documents do not specify impacted versions beyond 3.5, nor a concrete root cause or r...

CVE-2008-6759

ViArt Shop (Shopping Cart) 3.5 is affected. The vulnerability arises in manuals_search.php where a URL in the POST_DATA parameter can cause an error message to disclose the installation path, enabling information disclosure. No exploit specifics are provided in the available documents. Impact is ...

CVE-2008-6766

ViArt Shop (Shopping Cart) 3.5 is affected by CVE-2008-6766 through the cart_save.php entry point. The vulnerability allows remote attackers to cause a denial-of-service condition by sending a flood of requests, resulting in an excessive number of shopping carts. The available documents do not pr...

CVE-2008-6760

CVE-2008-6760 affects ViArt Shop (Shopping Cart) 3.5. The vulnerability arises in cart_save.php where an unauthenticated add-and-save action can disclose sensitive information by displaying SQL table names in an error message, due to mishandling of a missing user_id parameter. Exploitation detail...

CVE-2008-6757

CVE-2008-6757 concerns a cross-site scripting vulnerability in ViArt Shop (Shopping Cart) 3.5. The flaw exists in manuals_search.php, where the manuals_search parameter enables remote attackers to inject arbitrary web script or HTML. The NVD entry lists a CVSS v2 base score of 4.3 (MEDIUM) with a...

CVE-2009-1447

Unrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/...

CVE-2009-1447

The CVE-2009-1447 vulnerability affects e-cart.biz Free Shopping Cart, specifically the admin/editor/image.php endpoint. It is an unrestricted file upload flaw that allows remote attackers to upload a file with an executable extension and access it via a direct URL under images/, enabling arbitra...