4953 matches found
Smartwin Technology CyberOffice Shopping Cart 2.0 - Price Modification
source: https://www.securityfocus.com/bid/1733/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. The order form CyberOffice Shopping Cart utilizes can be easily modified by downloading the form locally...
CVE-2000-0396
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files...
CVE-2000-0396
CVE-2000-0396 affects the add.exe component of the Carello shopping cart software. The vulnerability allows remote attackers to duplicate files on the server, which could enable reading source code of web scripts such as .ASP files. The NVD entry lists a MEDIUM base score (5.0) with network impac...
CVE-2000-0635
The viewpage.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2000-0401
Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string...
Переполнение буфера в PDG Cart
Классические переполнения в нескольких приложениях...
Alert: PDG Cart Overflows
Cerberus Information Security Advisory CISADV000525 http://www.cerberus-infosec.co.uk/advisories.html Released : 25th May 2000 Name : PDGSoft Shopping Cart buffer overflows Affected Systems : UNIX/NT Web servers with PDGSoft's Cart. Issue : Remote attackers can execute arbitrary code Description...
Дырка в Carello shopping cart
Можно создавать файл на сервере или переименовывать существующие файлы. Таким образом можно, нпример, получить исходные тексты .asp - файла...
CVE-2000-0396
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files...
Pacific Software Carello 1.2.1 - File Duplication / Source Disclosure
source: https://www.securityfocus.com/bid/1245/info A remote user can gain read and write access on a target machine running Carello shopping cart software. First, a user may create a duplicate of a known file in a known directory on the target host through add.exe in /scripts/Carello. Accessing...
CVE-2000-0401
Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string...
CVE-2000-0254
The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables...
Dansie Shopping Cart 3.0.4 - Multiple Vulnerabilities
Dansie Shopping Cart 3.0.4 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/1115/info Appending specific variables and values to http://target/cgi-bin/cart.pl? will allow remote users to perform certain actions. "vars" will display the configuration settings of the application...
more problems with that POS dansie cart software!
if installing a backdoor in the cart software wasn't bad enough.. the whole implimentation of pricing and adding items to cart is crap.. example form to add items to your cart kindly provided on the publishers site using the demo cart they set up for us: snip FORM METHOD=POST...
Dansie Shopping Cart 3.0.4 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/1115/info Appending specific variables and values to http://target/cgi-bin/cart.pl? will allow remote users to perform certain actions. "vars" will display the configuration settings of the application, which includes the username and password used for...
Back Door in Commercial Shopping Cart
Trojanized Commercial Shopping Cart =============================================================== Dansie Shopping Cart Version : 3.04 presumably earlier versions as well Author : Craig Dansie URL : http://www.dansie.net/ Language : Perl both NT and Unix platforms are vulnerable License :...
Dansie Shopping Cart Backdoor Detection
The script /cart/cart.cgi is present. If this shopping cart system is the Dansie Shopping Cart, and if it is older than version 3.0.8 then it is very likely that it contains a backdoor that allows anyone to execute arbitrary commands on this system. C Tenable Network Security, Inc...
CVE-2000-0282
TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. dot dot attack on the webplus CGI program...