maiancart-xss.txt

---------------------------------------------------------------- Script : Maian Cart v1.1 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...

Maian Cart v1.1 XSS Vulnerabilities

---------------------------------------------------------------- Script : Maian Cart v1.1 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...

Zen Cart 2008 - index.php?keyword SQL Injection

Zen Cart 2008 - index.php?keyword SQL Injection source: https://www.securityfocus.com/bid/29020/info Zen Cart is prone to a cross-site scripting vulnerability and an SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues...

Zen Cart 2008 - index.php?keyword Cross-Site Scripting

Zen Cart 2008 - index.php?keyword Cross-Site Scripting source: https://www.securityfocus.com/bid/29020/info Zen Cart is prone to a cross-site scripting vulnerability and an SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these...

zencart-sql.txt

+==========================================================================+ + 2008 Zen Cart & SQL-Injection Vulnerabilities + +==========================================================================+ Authors: Ivan Sanchez Product: Zen Cart Web: http://www.zen-cart.com/ Versions: 2008 Zen Cart...

Zen Cart 2008 - 'index.php?keyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29020/info Zen Cart is prone to a cross-site scripting vulnerability and an SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based...

Zen Cart 2008 - 'index.php?keyword' SQL Injection

source: https://www.securityfocus.com/bid/29020/info Zen Cart is prone to a cross-site scripting vulnerability and an SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based...

CVE-2008-2038

Multiple SQL injection vulnerabilities in admin/adminindex.php in Turnkey Web Tools SunShop Shopping Cart 4.1.0 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby and 2 sort parameters. NOTE: the provenance of this information is unknown; the details are...

Sql injection

Multiple SQL injection vulnerabilities in admin/adminindex.php in Turnkey Web Tools SunShop Shopping Cart 4.1.0 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby and 2 sort parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-2038

Multiple SQL injection vulnerabilities in admin/adminindex.php in Turnkey Web Tools SunShop Shopping Cart 4.1.0 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby and 2 sort parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-2038

TurnKey Web Tools SunShop Shopping Cart 4.1.0 has multiple SQL injection vulnerabilities in admin/adminindex.php that allow remote authenticated administrators to execute arbitrary SQL commands via the (1) orderby and (2) sort parameters. This CVE entry notes provenance is unknown and details are...

CVE-2008-1921

SQL injection vulnerability in storepages/categorylist.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...

CVE-2008-1921

SQL injection vulnerability in storepages/categorylist.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...

CVE-2008-1921

The CVE-2008-1921 entry describes an SQL injection in the 5th Avenue Shopping Cart 1.2 trial edition, specifically in store_pages/category_list.php, reachable via the category_ID parameter. The underlying issue allows remote attackers to craft SQL payloads to execute arbitrary commands. Documents...

5th Avenue Shopping Cart (category_ID) SQL Injection Vulnerability

No description provided by source. Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

5th Avenue Shopping Cart - category_id SQL Injection

5th Avenue Shopping Cart - categoryid SQL Injection Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

5th Avenue Shopping Cart (category_ID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== 5th Avenue Shopping Cart categoryID SQL Injection Vulnerability ================================================================== 5th avenue Shopping Cart SQL Injection...

fifthave-sql.txt

Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

5th Avenue Shopping Cart - 'category_id' SQL Injection

Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

Unfixed Redirect vulnerability at www.zen-cart.com

Security researcher APS, has submitted on 04/03/2008 a Redirect vulnerability affecting www.zen-cart.com, which at the time of submission ranked 7684 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is currently unfixed. If you...