CVE-2006-2163

Cross-site scripting XSS vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inject arbitrary web script or HTML via the setbackurl parameter...

CVE-2006-2164

Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 categoryid parameter in a storespecialoffers.php and b store.php, and 2 prodid parameter in c cart.php and d productinfo.php. NOTE: this issue also...

CVE-2006-2163

CVE-2006-2163 is an XSS vulnerability in Pinnacle Cart (versions up to 3.33 and earlier) where the setbackurl parameter in index.php can be exploited to inject arbitrary script/HTML. The root cause is unvalidated/unsanitized input propagated to the browser. Affected software is Pinnacle Cart 3.33...

CVE-2006-2164

CVE-2006-2164 affects Avactis Shopping Cart 0.1.2 and earlier, with SQL injection via the parameters category_id in (a) store_special_offers.php and (b) store.php, and prod_id in (c) cart.php and (d) product_info.php. The issue may also cause full path disclosure from invalid SQL queries. No expl...

CVE-2006-2163

Cross-site scripting XSS vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inject arbitrary web script or HTML via the setbackurl parameter...

CVE-2006-2165

CVE-2006-2165 affects Avactis Shopping Cart

Pinnacle Cart 3.3 - index.php Cross-Site Scripting

Pinnacle Cart 3.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17794/info Pinnacle Cart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue t...

Pinnacle Cart 3.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17794/info Pinnacle Cart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browse...

SunShop Shopping Cart 3.5 - Multiple Cross-Site Scripting Vulnerabilities

SunShop Shopping Cart 3.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17770/info SunShop Shopping Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

SunShop XSS vuln.

SunShop XSS vuln. Vuln. discovered by : r0t Date: 1 may 2006 vendor:www.turnkeywebtools.com/index.php/location/products/product/sunshop// affected versions:3.5 and prior orginal advisory:http://pridels.blogspot.com/2006/05/sunshop-xss-vuln.html Vuln. Description: SunShop Shopping Cart contains a...

Avactis Shopping Cart vuln.

Avactis Shopping Cart vuln. Vuln. discovered by : r0t Date: 1 may 2006 vendor:http://www.avactis.com affected versions:0.1.2 and prior orginal advisory: http://pridels.blogspot.com/2006/05/avactis-shopping-cart-vuln.html Vuln. Description: 1. sql inj. Avactis Shopping Cart contains a flaw that...

SunShop Shopping Cart 3.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17770/info SunShop Shopping Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

Pinnacle Cart XSS

Pinnacle Cart XSS Vuln. discovered by : r0t Date: 30 april 2006 vendorlink:http://www.pinnaclecart.com/ affected versions:3.33 and prior orginal advisory:http://pridels.blogspot.com/2006/04/pinnacle-cart-xss.html Vuln. Description: Pinnacle Cart contains a flaw that allows a remote cross site...

CVE-2006-2051

Multiple cross-site scripting XSS vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the 1 username and 2 password parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the 1 username and 2 password parameters...

CVE-2006-2051

CVE-2006-2051 describes multiple cross-site scripting (XSS) vulnerabilities in NextAge Shopping Cart, specifically in myadmin/index.php, where the (1) username and (2) password parameters can be abused to inject arbitrary web script or HTML. The CVE has associated public references and a NVD scor...

CVE-2006-2051

Multiple cross-site scripting XSS vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the 1 username and 2 password parameters...

NextAge Shopping Cart Software XSS

NextAge Shopping Cart Software XSS ------------------------------------------------------- Aria-security.com advisory Bug Discovered by R@1D3N amin emami [email protected] Date:25/04/2005 original advisory:http://www.aria-security.net/advisory/nextage/nextageshoppingcart.txt...

CVE-2005-4787

Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to 1 index.php, 2 admin/index.php, and 3 admin/adminindex.php, which executes the PHP phpinfo function. NOTE: The vendor has disputed this issue, saying that "Having this in the co...

CVE-2005-4787

Turnkey Web Tools SunShop Shopping Cart is affected by CVE-2005-4787 via endpoints that execute PHP’s phpinfo() (index.php, admin/index.php, admin/adminindex.php), potentially exposing sensitive information. The root cause is the direct invocation of phpinfo() in these pages, enabling information...