Naxtor Shopping Cart 1.0 - Shop_Display_Products.php SQL Injection

Naxtor Shopping Cart 1.0 - ShopDisplayProducts.php SQL Injection source: https://www.securityfocus.com/bid/14456/info Naxtor Shopping Cart is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an S...

Naxtor Shopping Cart 1.0 - 'Lost_password.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14454/info Naxtor Shopping Cart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

[HSC Security Group] SQL Injection in Product Cart 2.6

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL Injection in Product Cart 2.6 Risk: Medium to High An SQL injection affects Product Cart 2.6. Database Manipulation is possible. viewPrd.asp?idcategory=' Vendor: http://www.earlyimpact.com/ "Our...

[Full-disclosure] Indiatimes Shopping Cart XSS (Cross Site Scripting) Attacks

Recently, I discovered a major XSS issue with Indiatimes shopping cart. It is one of the largest shopping and auctioning portal in India. The XSS flaw is present in most of the links of the portal however, I am currently reporting only few specific links which are very critical. The vulnerability...

pc26sql.txt

--Alt-Boundary-21084.11145145 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL Injection in Product Cart 2.6 Risk: Medium to High An SQL...

VP-ASP Multiple Script SQL Injection

The remote host is using the VP-ASP, a shopping cart program written in ASP. The remote version of this software contains three SQL injection vulnerabilities in the files shopaddtocart.asp, shopaddtocartnodb.asp and shopproductselect.asp. An attacker may exploit these flaws to execute arbitrary S...

Dragonfly Shopping Cart Multiple vulnerabilities

Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc or even code them. Learn more at http://www.dbtech.org Severity: High Title: Dragonfly Shopping Cart Multiple vulnerabilities Date:...

CVE-2005-2217

Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow remote attackers to obtain sensitive information such as program variables...

CVE-2005-2217

Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow remote attackers to obtain sensitive information such as program variables...

CVE-2005-2217

Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, allowing remote attackers to obtain sensitive information such as program variables. The issue is classified with a CVSS v2 base score of 5.0 (Network attack vector, Low attack complexity, Confident...

dragonfly.txt

------=NextPart001001201C586EF.F4564F50 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc =...

CVE-2005-2190

Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to comersusoptAffiliateRegistrationExec.asp or 2 idProduct parameter to comersusoptReviewReadExec.asp...

CVE-2005-2191

Multiple cross-site scripting XSS vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter to comersusbackofficelistAssignedPricesToCustomer.asp or 2 message parameter to comersusbackofficemessage.asp...

CVE-2005-2190

Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to comersusoptAffiliateRegistrationExec.asp or 2 idProduct parameter to comersusoptReviewReadExec.asp...

CVE-2005-2191

CVE-2005-2191 concerns multiple XSS vulnerabilities in Comersus shopping cart. The flaws allow remote attackers to inject arbitrary web script or HTML via the name parameter in comersus_backoffice_listAssignedPricesToCustomer.asp or the message parameter in comersus_backoffice_message.asp. This r...

CVE-2005-2191

Multiple cross-site scripting XSS vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter to comersusbackofficelistAssignedPricesToCustomer.asp or 2 message parameter to comersusbackofficemessage.asp...

CVE-2005-2190

CVE-2005-2190 concerns multiple SQL injection flaws in Comersus Shop Cart. Remote attackers can inject via (1) email to comersus_optAffiliateRegistrationExec.asp or (2) idProduct to comersus_optReviewReadExec.asp, potentially executing arbitrary SQL on the database. The NVD notes a Base Score of ...

[Bday release] Comersus shopping cart has multiple Sql injection and Cross Site Scripting vulnerabilities

Dcrab 's Security Advisory http://www.dbtech.org Deadbolt Computer Technologies SPECIAL BIRTHDAY RELEASE, 18TH BIRTHDAY RELEASE FOR DIABOLIC CRAB, YOU CAN SEND EMAILS TO [email protected] Get Dcrab's Services to audit your Web servers, scripts, networks, etc or even code them. Learn more at...

Comersus Cart Multiple Vulnerabilities (SQLi, XSS)

The version of Comersus Cart installed on the remote host suffers from multiple SQL injection and cross-site scripting flaws due to its failure to sanitize user-supplied input. Attackers may be able to exploit these flaws to influence database queries or cause arbitrary HTML and script code to be...

Comersus Open Technologies Comersus Cart 6.0.41 - Multiple SQL Injections

Comersus Open Technologies Comersus Cart 6.0.41 - Multiple SQL Injections source: https://www.securityfocus.com/bid/14183/info Comersus Cart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before usi...