5952 matches found
CVE-2006-0697: Undefined Security Weakness
Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests...
[SA18801] Zen Cart Unspecified SQL Injection Vulnerabilities
TITLE: Zen Cart Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18801 VERIFY ADVISORY: http://secunia.com/advisories/18801/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Zen Cart 1.x http://secunia.com/product/3488/ DESCRIPTION: A...
pwned-vpasp.txt
[email protected] presents.. VP-ASP Getting owned. Vulnerable Software: VP-ASP Shopping Cart 5.50, OTHERS Impact: Manipulation of dataSQL Injection ATTACK Credits: Mindy, SlickK, CrazycookieLove you =D, sese Special thanks to Mudavyne for their song "HAPPY". While talking about SQL...
Cross site scripting
Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...
Cross site scripting
Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2006-0109
Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2006-0111
Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...
CVE-2006-0111
The CVE-2006-0111 entry describes a Cross-site scripting (XSS) vulnerability in the Boxcar Media Shopping Cart, specifically in index.php. The affected component is the index.php handler, with the vulnerability exploitable via the (1) parent and (2) pg URL parameters. Attackers can inject arbitra...
CVE-2006-0111: Undefined Security Weakness
Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...
CVE-2006-0109
Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2006-0111
Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...
CVE-2006-0109: Undefined Security Weakness
Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2006-0109
The CVE-2006-0109 entry describes a Cross-site scripting vulnerability in Modular Merchant Shopping Cart, specifically in category.php where the cat parameter can be exploited to inject arbitrary web script or HTML. The vulnerability affects that product/component and arises from unsanitized inpu...
Remote file inclusion
PHP remote file include vulnerability in 1 include/templates/categories/default.php and 2 certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter...
CVE-2006-0099
PHP remote file include vulnerability in 1 include/templates/categories/default.php and 2 certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter...
EUVD-2006-0107
PHP remote file include vulnerability in 1 include/templates/categories/default.php and 2 certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter...
CVE-2006-0099
CVE-2006-0099 is a PHP remote file include vulnerability in Valdersoft Shopping Cart 3.0. The flaw occurs in (1) include/templates/categories/default.php and (2) other include/templates/categories/ PHP scripts, where an attacker can cause arbitrary code execution by supplying a crafted URL in the...
CVE-2006-0099
PHP remote file include vulnerability in 1 include/templates/categories/default.php and 2 certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter...
CVE-2006-0099: Undefined Security Weakness
PHP remote file include vulnerability in 1 include/templates/categories/default.php and 2 certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter...