CVE-2006-4969

CVE-2006-4969 refers to multiple PHP remote file inclusion vulnerabilities in the WAHM E-Commerce Pie Cart Pro. The issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the Inc_Dir parameter across numerous PHP files (e.g., affiliates.php, orders.php, events.php, i...

CVE-2006-4970

The CVE-2006-4970 issue is a PHP remote file inclusion vulnerability in enc/content.php of WAHM E-Commerce Pie Cart Pro. An attacker can cause remote code execution by supplying a crafted URL in the Home_Path parameter. The vulnerability affects WAHM E‑Commerce Pie Cart Pro products as described,...

CVE-2006-4967

Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...

CVE-2006-4970

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4967: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...

CVE-2006-4970: Undefined Security Weakness

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4969: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

CharonCartv3.txt

Vulnerability Report Title : Charon Cart v3Review.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.charon.co.uk Exploit; http://target/path/Review.asp?ProductID=SQL HERE Example:...

CVE-2006-4904

CVE-2006-4904 affects Qualiteam X-Cart 4.1.3 and earlier. A vulnerability in the cmpi.php script allows dynamic variable evaluation, permitting an attacker to overwrite arbitrary configuration variables and execute arbitrary PHP code (demonstrated via PHP remote file inclusion using the xcart_dir...

[SA22030] NextAge Cart "CatId" and "SearchWd" Cross-Site Scripting

TITLE: NextAge Cart "CatId" and "SearchWd" Cross-Site Scripting SECUNIA ADVISORY ID: SA22030 VERIFY ADVISORY: http://secunia.com/advisories/22030/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Nextage Cart http://secunia.com/product/12037/ DESCRIPTION: meto5757...

CVE-2006-4904: Undefined Security Weakness

Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code, as demonstrated by PHP remote file inclusion via the xcartdir parameter...

Pie Cart Pro => (Home_Path) Remote File Inclusion Exploit

==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.doodlebabies.com/...

Pie Cart Pro => (Inc_Dir) Remote File Inclusion Exploit

==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA http://www.doodlebabies.com/...

[SA22005] Qualiteam X-Cart cmpi.php Variable Overwriting Vulnerability

TITLE: Qualiteam X-Cart cmpi.php Variable Overwriting Vulnerability SECUNIA ADVISORY ID: SA22005 VERIFY ADVISORY: http://secunia.com/advisories/22005/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Qualiteam X-Cart Pro 4.x http://secunia.com/product/11995/ Qualiteam...

NextAge Cart Cross-Site Scripting multiple Vulnerabilities

Vulnerable:NextAge Cart Cross-Site Scripting Vulnerability. Venedor site : http://www.nextagecart.com Critical Level : Dangerous Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks. Exploit :...

Pie Cart Pro => (Home_Path) Remote File Inclusion Exploit

==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.doodlebabies.com/...

CVE-2006-4882

SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID parameter...

CVE-2006-4882

The CVE-2006-4882 entry describes a SQL injection in Review.asp of Julian Roberts Charon Cart 3, exploitable via the ProductID parameter. The underlying vulnerability is the ability for remote attackers to execute arbitrary SQL commands, with impact described as partial confidentiality, integrity...

CVE-2006-4882

SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID parameter...

CVE-2006-4882: Undefined Security Weakness

SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID parameter...