4867 matches found
DST2K0036: Price modification possible in CyberOffice Shopping Ca rt
All, We have released this with the permission of the vendor. Rgds Ollie ----- Ollie Whitehouse Security Team Leader tel: +44 020 79160200 ============================================================================ Delphis Consulting Plc...
Security Advisory: Hassan Consulting's shop.cgi Directory Traversal Vulnerability.
October 7, 2000 Security Advisory shop.cgi.ad-1.00-10 : Hassan Consulting's Shopping Cart shop.cgi Directory Traversal Vulnerability Affected Product: Hassan Consulting's Shopping Cart shop.cgi/shop.pl Version 1.18 possibly others aswell Affected Platforms: Unix Windows Overview: Hassan...
Bytes interactive Web shopper 1.02.0 - Directory Traversal
Bytes interactive Web shopper 1.02.0 - Directory Traversal source: https://www.securityfocus.com/bid/1776/info Bytes Interactive Web Shopper is a XML based shopping cart application. The "newpage" variable does not properly check for insecure relative paths such as the double dot "..". The...
Bytes interactive Web shopper 1.0/2.0 - Directory Traversal
source: https://www.securityfocus.com/bid/1776/info Bytes Interactive Web Shopper is a XML based shopping cart application. The "newpage" variable does not properly check for insecure relative paths such as the double dot "..". The following URL request:...
Hassan Consulting Shopping Cart 1.18 - Directory Traversal
Hassan Consulting Shopping Cart 1.18 - Directory Traversal source: https://www.securityfocus.com/bid/1777/info The $page variable in Hassan Consulting Shopping Cart does not properly check for insecure relative paths such as the double dot "..". Therefore, requesting the following URL will displa...
Hassan Consulting Shopping Cart 1.18 - Directory Traversal
source: https://www.securityfocus.com/bid/1777/info The $page variable in Hassan Consulting Shopping Cart does not properly check for insecure relative paths such as the double dot "..". Therefore, requesting the following URL will display the specified file:...
DST2K0035: Credit card (customer) details exposed within CyberOff ice Shopping Cart v2
All, We have not released this for the past week at the vendors request. This was to enable them to notify all registered users about this vulnerability and to provide a work around. We have taken the unusual step of including the vendors response to our original advisory release in full. This wa...
Дырки в CyberOffice Shopping Cart
Можно поменять стоимость заказа и получить доступ к базе данных сервера...
DST2K0036: Price modification possible in CyberOffice Shopping Ca rt
All, We have released this with the permission of the vendor. Rgds Ollie ----- Ollie Whitehouse Security Team Leader tel: +44 020 79160200 ============================================================================ Delphis Consulting Plc...
DST2K0036.txt
============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 22/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...
DST2K0035.txt
============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 22/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...
SmartWin CyberOffice Shopping Cart 2.0 - Client Information Disclosure
SmartWin CyberOffice Shopping Cart 2.0 - Client Information Disclosure source: https://www.securityfocus.com/bid/1734/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. It is possible for a remote user ...
Smartwin Technology CyberOffice Shopping Cart 2.0 - Price Modification
Smartwin Technology CyberOffice Shopping Cart 2.0 - Price Modification source: https://www.securityfocus.com/bid/1733/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. The order form CyberOffice Shoppi...
Smartwin Technology CyberOffice Shopping Cart 2.0 - Price Modification
source: https://www.securityfocus.com/bid/1733/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. The order form CyberOffice Shopping Cart utilizes can be easily modified by downloading the form locally...
SmartWin CyberOffice Shopping Cart 2.0 - Client Information Disclosure
source: https://www.securityfocus.com/bid/1734/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. It is possible for a remote user to gain read access to the private directory on a website running...
CVE-2000-0396
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files...
CVE-2000-0396
CVE-2000-0396 affects the add.exe component of the Carello shopping cart software. The vulnerability allows remote attackers to duplicate files on the server, which could enable reading source code of web scripts such as .ASP files. The NVD entry lists a MEDIUM base score (5.0) with network impac...
CVE-2000-0635
The viewpage.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters...