CVE-2006-0087

SQL injection vulnerability in 1 pages.php and 2 detail.php in Lizard Cart CMS 1.04 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-0087

CVE-2006-0087 affects Lizard Cart CMS 1.04. The vulnerability is in (1) pages.php and (2) detail.php, where the id parameter is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. The NVD data lists a base score of 7.5 (HIGH) with network access, low attack c...

CVE-2006-0087

SQL injection vulnerability in 1 pages.php and 2 detail.php in Lizard Cart CMS 1.04 allows remote attackers to execute arbitrary SQL commands via the id parameter...

LizardCart.txt

New eVuln Advisory: Lizard Cart CMS SQL Injection Vulnerability --------------------Summary---------------- Software: Lizard Cart CMS Sowtware's Web Site: http://sourceforge.net/projects/lizardcart Versions: 1.04 Critical Level: Dangerous Type: SQL Injection Class: Remote Status: Unpatched Exploi...

[EXPL] Valdersoft Shopping Cart Remote Command Execution (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[eVuln] Lizard Cart CMS SQL Injection Vulnerability

New eVuln Advisory: Lizard Cart CMS SQL Injection Vulnerability --------------------Summary---------------- Software: Lizard Cart CMS Sowtware's Web Site: http://sourceforge.net/projects/lizardcart Versions: 1.04 Critical Level: Dangerous Type: SQL Injection Class: Remote Status: Unpatched Exploi...

CVE-2006-0087: Undefined Security Weakness

SQL injection vulnerability in 1 pages.php and 2 detail.php in Lizard Cart CMS 1.04 allows remote attackers to execute arbitrary SQL commands via the id parameter...

cijfer-vsczpl.pl.txt

!/usr/bin/perl cijfer-vscxpl - Valdersoft Shopping Cart All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-vscxpl.pl -h www.valdersoft.com -d /store [email protected] /$ id;uname -a uid=2526apache gid=2524apache groups=2524apache, 10004psaserv FreeBSD valdersoft.com...

Sql injection

SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...

CVE-2006-0068

SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...

CVE-2006-0068

SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...

CVE-2006-0068

CVE-2006-0068 affects Primo Cart 1.0 and earlier, with a SQL injection vulnerability exploitable via the q parameter in search.php and the email parameter in user.php, allowing remote arbitrary SQL execution. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and low comple...

CVE-2006-0068: Undefined Security Weakness

SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...

Primo Place Primo Cart 1.0 - Multiple SQL Injections

Primo Place Primo Cart 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/16125/info Primo Cart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Valdersoft Shopping Cart 3.0 - Remote Command Execution

Valdersoft Shopping Cart 3.0 - Remote Command Execution !/usr/bin/perl cijfer-vscxpl - Valdersoft Shopping Cart All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-vscxpl.pl -h www.valdersoft.com -d /store [email protected] /$ id;uname -a uid=2526apache gid=2524apache...

Valdersoft Shopping Cart <= 3.0 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================================ Valdersoft Shopping Cart All rights reserved. 1. example email protected:/research$ ./cijfer-vscxpl.pl -h www.valdersoft.com -d /store email protected /$ id;uname -a...

Primo Cart SQL inj.

Primo Cart SQL inj. Vuln. discovered by : r0t Date: 2 jan. 2006 orginal advisory:http://pridels.blogspot.com/2006/01/primo-cart-sql-inj.html vendor:www.primoplace.com/primo-cart.htm affected version:1.0 and prior Product Description: Primo Cart is a fully customizable turnkey shopping cart soluti...

Valdersoft Shopping Cart 3.0 - Remote Command Execution

!/usr/bin/perl cijfer-vscxpl - Valdersoft Shopping Cart All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-vscxpl.pl -h www.valdersoft.com -d /store [email protected] /$ id;uname -a uid=2526apache gid=2524apache groups=2524apache, 10004psaserv FreeBSD valdersoft.com...

Primo Place Primo Cart 1.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/16125/info Primo Cart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...

CVE-2005-4787

Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to 1 index.php, 2 admin/index.php, and 3 admin/adminindex.php, which executes the PHP phpinfo function. NOTE: The vendor has disputed this issue, saying that "Having this in the co...