SunShop Shopping Cart 3.5/4.0 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/23662/info Sunshop is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php or 2 checkout.php...

CVE-2007-2070

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php or 2 checkout.php...

CVE-2007-2070

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php or 2 checkout.php...

CVE-2007-2070

Turnkey Web Tools SunShop Shopping Cart is affected by CVE-2007-2070 due to multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to trigger arbitrary PHP code execution by supplying a crafted URL in the abs_path parameter to index.php or checkout.php. The issue affects ...

CVE-2007-2070: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php or 2 checkout.php...

SunShop Shopping Cart <= 3.5 (abs_path) RFI Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== SunShop Shopping Cart = 3.5 abspath RFI Vulnerabilities =========================================================== sunshop 4 index.php Remote File Include Vulnerability...

SunShop Shopping Cart 3.5 - 'abs_path' Remote File Inclusion

sunshop 4 index.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : SunShop v3.5 Discovered By : irvian scripts site : http://www.turnkeywebtools.com/sunshop/ Thanks To : hitamputih nyubicrew patihack special To...

fishcart-sql.txt

vendor site: http://fishcart.org/ product :fish cart bug:injection sql risk : medium injection sql : /display.php?cartid=200701210157208&zid=1&lid=1&olimit=5&cat=&key1=&nlst=y&olst='sql change the cartid value with yours laurent gaffie http://s-a-p.ca/ contact: [email protected]...

Sql injection

SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginLastname parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2007-0230

PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the installdir parameter. NOTE: CVE and third parties dispute this vulnerability because installdir is defined before use...

CVE-2007-0224

SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginLastname parameter...

CVE-2007-0225

Cross-site scripting XSS vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2007-0225

The CVE-2007-0225 entry affects VP-ASP Shopping Cart (version 6.09 and earlier), specifically a Cross-Site Scripting (XSS) flaw in the ASP page shopcustadmin.asp. The vulnerability allows an attacker to inject arbitrary web script or HTML by supplying a payload in the msg parameter. This is a cli...

CVE-2007-0224

SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginLastname parameter...

CVE-2007-0224

CVE-2007-0224 affects VP-ASP Shopping Cart (version 6.09 and earlier) via the vulnerable endpoint in the file/component shopgiftregsearch.asp . The root cause is a SQL injection vulnerability that can be exploited through the LoginLastname parameter, enabling remote attackers to execute arbitrary...

CVE-2007-0230

CS-Cart 1.3.3 contains a PHP remote file inclusion in install.php via the install_dir parameter, potentially allowing remote code execution. Several sources note that the vulnerability is disputed because install_dir is defined before use, and no specific exploit details are provided in the docum...

CVE-2007-0225

Cross-site scripting XSS vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2007-0230

PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the installdir parameter. NOTE: CVE and third parties dispute this vulnerability because installdir is defined before use...