CVE-2005-4429

SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 sortby and 2 sortorder parameters to index.php...

CVE-2005-4429

CVE-2005-4429 describes a SQL injection vulnerability in CS-Cart 1.3.0. The flaw resides in index.php where the parameters sort_by and sort_order can be exploited by remote attackers to execute arbitrary SQL commands. Documents indicate this affects CS-Cart 1.3.0 and allow arbitrary SQL execution...

CVE-2005-4314

Cross-site scripting XSS vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 stop and 2 user parameters...

CVE-2005-4314

CVE-2005-4314 describes a cross-site scripting (XSS) vulnerability in the ppcal.cgi component of PPCal Shopping Cart 3.3.0 and earlier. The vulnerability allows an attacker to inject arbitrary web script or HTML via the (1) stop and (2) user parameters. Evidence from NVD states a medium severity ...

CVE-2005-4314

Cross-site scripting XSS vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 stop and 2 user parameters...

CVE-2005-4290

Cross-site scripting XSS vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 kword, 2 max, 3 min, 4 comp, and 5 f parameters...

CVE-2005-4290

The CVE-2005-4290 entry describes a cross-site scripting (XSS) vulnerability in ECW-Cart 2.03 and earlier, located in index.cgi. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the parameters (1) kword, (2) max, (3) min, (4) comp, and (5) f. Affected software ...

CVE-2005-4290

Cross-site scripting XSS vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 kword, 2 max, 3 min, 4 comp, and 5 f parameters...

ECW-Cart XSS vuln.

ECW-Cart XSS vuln. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ecw-cart-xss-vuln.html vendor:www.soft4e.com/cart.html affected version:2.03 and prior Product Description: ECW-Cart - simple for use featured shopping cart with ability to use MS...

Soft4e ECW-Cart 2.0.3 - Multiple Cross-Site Scripting Vulnerabilities

Soft4e ECW-Cart 2.0.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15890/info ECW-Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

CKGOLD XSS vuln.

CKGOLD XSS vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ckgold-xss-vuln.html vendor:http://www.cartkeeper.com/ affected version:latest Product Description: CKGOLD - E-Commerce Shopping Cart Solution The CKGold system is a feature rich...

CVE-2005-3997

Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including 1 graphs/bannerdaily.php, 2 graphs/bannerinfobox.php, 3 graphs/banneryearly.php, 4 graphs/bannermonthly.ph...

CVE-2005-4003

Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions ASPS Shopping Cart Professional 2.9d and earlier, and Lite 2.1 and earlier, allow remote attackers to execute arbitrary SQL commands via the 1 srchproductname parameter to advsearch.asp and 2 bsearch parameter to...

CVE-2005-3996

SQL injection vulnerability in admin/passwordforgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the adminemail parameter...

CVE-2005-3996

SQL injection vulnerability in admin/passwordforgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the adminemail parameter...

CVE-2005-3996

CVE-2005-3996 corresponds to a SQL injection vulnerability in Zen Cart’s admin/password_forgotten.php where the admin_email parameter is used in a database query without proper validation. Affected product/version: Zen Cart 1.2.6d and earlier. Impact described in multiple sources: remote attacker...

CVE-2005-4003

Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional ≤2.9d and Lite ≤2.1 are affected by SQL injection vulnerabilities remote attackers can exploit via (1) srch_product_name in adv_search.asp and (2) b_search in bsearch.asp to execute arbitrary SQL commands.

CVE-2005-3997

CVE-2005-3997 (Zen Cart) affects Zen Cart 1.2.6d and earlier. Under certain PHP configurations, remote attackers can obtain sensitive information by directly requesting files in admin/includes, leaking the web server path in error messages. Affected files include: graphs/banner_daily.php, graphs/...

CVE-2005-4003

Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions ASPS Shopping Cart Professional 2.9d and earlier, and Lite 2.1 and earlier, allow remote attackers to execute arbitrary SQL commands via the 1 srchproductname parameter to advsearch.asp and 2 bsearch parameter to...

CVE-2005-3997

Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including 1 graphs/bannerdaily.php, 2 graphs/bannerinfobox.php, 3 graphs/banneryearly.php, 4 graphs/bannermonthly.ph...