4867 matches found
CVE-2004-2023
SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote attackers to execute arbitrary SQL via the 1 adminname or 2 adminpass parameters...
CVE-2004-2448
S-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the database name...
CVE-2004-2025
SQL injection vulnerability in applicationtop.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the productsid parameter...
CVE-2004-2411
The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting XSS attacks that do not use tags, as demonstrated via javascript in IMG tags to 1 the cat parameter in...
CVE-2004-2413
SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL commands via the 1 Processed0 and 2 Processed1 parameters in a POST request to shopproductselect.asp...
CVE-2004-1873
SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via the catcode parameter...
PT-2004-2772 · A Cart · A-Cart Pro +1
Name of the Vulnerable Software and Affected Versions: A-CART Pro version 2.0 A-CART version 2.0 Description: The issue allows remote attackers to gain privileges via the catcode parameter in the "category.asp" file. Recommendations: For A-CART Pro version 2.0, update the category.asp file to...
CVE-2004-0350
SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring...
CVE-2004-0348
SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter...
CVE-2004-0240
Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. dot dot in the shopclosedfile argument to auth.php...
CVE-2004-0242
X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with 1 phpinfo command or 2 perlinfo command...
CVE-2004-0241
X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perlbinary argument in 1 upgrade.php or 2 general.php...
Yahoo! Store Security Advisory
Yahoo! Store Security Advisory Advisory: http://securitytracker.com/id?1011403 Date: September 23, 2004 Vendor: Yahoo! Product: Yahoo! Store Status: Fixed by the vendor; Coordinated release Credit: Ben Efros [email protected] http://www.citiprice.com/ Description: Ben Efros reported the followin...
ADVISORY: http response splitting hole in Comersus shopping cart
ADVISORY Author: Maestro me! Date: 01-SEP-04 Vendor: Comersus www.comersus.com Product: Comersus Shopping Cart 5.0991 Problem: Http response splitting web cache poisoning, xss, yadayadayada - http://www.packetstormsecurity.org/papers/general/whitepaperhttpresponse.pdf Exploit:...
CVE-2004-1656
CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter...
Comersus Cart 5.0 - HTTP Response Splitting
Comersus Cart 5.0 - HTTP Response Splitting source: https://www.securityfocus.com/bid/11083/info Comersus Cart is reported prone to a HTTP response splitting vulnerability. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or...
Comersus Cart 5.0 - HTTP Response Splitting
source: https://www.securityfocus.com/bid/11083/info Comersus Cart is reported prone to a HTTP response splitting vulnerability. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted. This could aid in various attacks, which...
PDGSoft Shopping Cart changepw.exe Remote Overflow
Binary data 1629.prm...