CVE-2008-4143

SQL injection vulnerability in categorysearch.php in RazorCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...

ephpshopping-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE-DON-Outlawz and all darkc0de members...

PT-2008-5439

Name of the Vulnerable Software and Affected Versions Quick.Cart version 3.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the query string in the admin.php file. Recommendations For Quick.Cart version...

Quick Cart 3.1 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31216/info Quick.Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

E-Shop Shopping Cart Script (search_results.php) SQL Injection Vuln

No description provided by source. ephpscripts SQL Injection Bug Founded By Mormoroth This Portal Isnt Free Sp TNX to : imm02rtal-Magicboy-Yashi Lashi-DJ7xpl-R$p And Others www.mormoroth.net www.shabgard.org dork : Powered by ephpscripts Exploit :...

CS-Cart 'core/user.php' SQL注入漏洞

BUGTRAQ ID: 30979 CNCAN ID：CNCAN-2008090301 CS-Cart是一款基于PHP的WEB应用程序。 CS-Cart不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'core/user.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 CS-Cart 1.3.5 可联系供应商获得补丁信息： http://www.cs-cart.com/...

Zen Cart SQL注入漏洞

BUGTRAQ ID: 31023 CNCAN ID：CNCAN-2008090509 Zen Cart是一款基于PHP的WEB应用程序。 Zen Cart不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Zen Cart Web Shopping Cart 1.3.8 Zen Cart Web Shopping Cart 1.3.7 Zen Cart Web Shopping Cart 1.3.6 Zen Ca...

Vastal I-Tech Toner Cart (id) SQL Injection Vulnerability

No description provided by source. Vastal I-Tech Toner Cart showseriesink.php id SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $400.00 Script Home Page : http://www.vastal.com/toner-cart-a-specialized-script-to-help-you-sell-toners-online.html Demo :...

Zen Cart products_id[] Array SQL Injection

The installed version of Zen Cart does not validate user-supplied input to the 'productsid' parameter array of the 'index.php' script when 'action' is set to 'multipleproductsaddproduct' before using the keys in a database query in the 'incartmixed' function in 'includes/classes/shoppingcart.php'...

Zen Cart <= 1.3.8a SQL Injection

GulfTech Security Research September 04, 2008 Vendor : Zen Ventures, LLC URL : http://www.zen-cart.com Version : Zen Cart = 1.3.8a Risk : SQL Injection Description: Zen Cart is a full featured open source ecommerce web application written in php that allows users to build, run and promote their o...

E-Shop Shopping Cart Script (search_results.php) SQL Injection Vuln

Exploit for unknown platform in category web applications =================================================================== E-Shop Shopping Cart Script searchresults.php SQL Injection Vuln =================================================================== ephpscripts SQL Injection Bug Founded ...

E-Shop Shopping Cart Script - search_results.php SQL Injection

E-Shop Shopping Cart Script - searchresults.php SQL Injection ephpscripts SQL Injection Bug Founded By Mormoroth This Portal Isnt Free Sp TNX to : imm02rtal-Magicboy-Yashi Lashi-DJ7xpl-R$p And Others www.mormoroth.net www.shabgard.org dork : Powered by ephpscripts Exploit :...

Vastal I-Tech Toner Cart - id SQL Injection

Vastal I-Tech Toner Cart - id SQL Injection Vastal I-Tech Toner Cart showseriesink.php id SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $400.00 Script Home Page : http://www.vastal.com/toner-cart-a-specialized-script-to-help-you-sell-toners-online.html...

Vastal I-Tech Toner Cart (id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Vastal I-Tech Toner Cart id SQL Injection Vulnerability ========================================================= Vastal I-Tech Toner Cart showseriesink.php id SQL Injection...

vastal-itechtoner.txt

Vastal I-Tech Toner Cart showseriesink.php id SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $400.00 Script Home Page : http://www.vastal.com/toner-cart-a-specialized-script-to-help-you-sell-toners-online.html Demo : http://www.vastal.com/united/ Dork :...

Vastal I-Tech Toner Cart - 'id' SQL Injection

Vastal I-Tech Toner Cart showseriesink.php id SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $400.00 Script Home Page : http://www.vastal.com/toner-cart-a-specialized-script-to-help-you-sell-toners-online.html Demo : http://www.vastal.com/united/ Dork :...

CS-Cart <= 1.3.5 SQL Injection

GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build, run and promote an online store. The...

zencart138a-sql.txt

GulfTech Security Research September 04, 2008 Vendor : Zen Ventures, LLC URL : http://www.zen-cart.com Version : Zen Cart = 1.3.8a Risk : SQL Injection Description: Zen Cart is a full featured open source ecommerce web application written in php that allows users to build, run and promote their o...

Zen Cart < 1.3.8a - SQL Injection

Zen Cart SQL Injection Vendor: Zen Ventures, LLC Product: Zen Cart Version: = 1.3.8a Website: http://www.zen-cart.com BID: 31023 CVE: CVE-2008-6985 OSVDB: 48346 SECUNIA: 31758 PACKETSTORM: 69640 Description: Zen Cart is a full featured open source ecommerce web application written in php that...

Zen Cart 1.3.8a - SQL Injection

Zen Cart 1.3.8a - SQL Injection Zen Cart SQL Injection Vendor: Zen Ventures, LLC Product: Zen Cart Version: = 1.3.8a Website: http://www.zen-cart.com BID: 31023 CVE: CVE-2008-6985 OSVDB: 48346 SECUNIA: 31758 PACKETSTORM: 69640 Description: Zen Cart is a full featured open source ecommerce web...