PT-2005-5450 · Turnkey Web Tools · Sunshop Shopping Cart

Name of the Vulnerable Software and Affected Versions: Turnkey Web Tools SunShop Shopping Cart affected versions not specified Description: The issue allows remote attackers to obtain sensitive information via a phpinfo action to specific API endpoints: "index.php", "admin/index.php", and...

CVE-2005-4571

Cross-site scripting XSS vulnerability in myEZshop Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4572

Multiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 GroupsId and 2 ItemsId parameters in admin.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4571

The provided documents confirm a Cross-site scripting (XSS) vulnerability in the myEZshop Shopping Cart . The issue allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. No explicit root cause or vulnerable version is stated in the sources; the impact is limite...

CVE-2005-4572

Multiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 GroupsId and 2 ItemsId parameters in admin.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4572

The CVE-2005-4572 entry concerns SQL injection vulnerabilities in the myEZshop Shopping Cart. According to the provided documents, remote attackers can execute arbitrary SQL commands via the GroupsId and ItemsId parameters in admin.php. The root cause is unauthenticated SQL handling in these para...

CVE-2005-4571

Cross-site scripting XSS vulnerability in myEZshop Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4571: Undefined Security Weakness

Cross-site scripting XSS vulnerability in myEZshop Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4572: Undefined Security Weakness

Multiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 GroupsId and 2 ItemsId parameters in admin.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CS-Cart - Multiple SQL Injections

CS-Cart - Multiple SQL Injections source: https://www.securityfocus.com/bid/16134/info CS-Cart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation...

CS-Cart - Multiple SQL Injections

source: https://www.securityfocus.com/bid/16134/info CS-Cart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of th...

CVE-2005-4488: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 iid, 2 iid2, 3 r, 4 cart, 5 str, 6 nf, and 7 a parameters...

CVE-2005-4429

SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 sortby and 2 sortorder parameters to index.php...

CVE-2005-4429: Undefined Security Weakness

SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 sortby and 2 sortorder parameters to index.php...

CVE-2005-4429

SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 sortby and 2 sortorder parameters to index.php...

CVE-2005-4429

CVE-2005-4429 describes a SQL injection vulnerability in CS-Cart 1.3.0. The flaw resides in index.php where the parameters sort_by and sort_order can be exploited by remote attackers to execute arbitrary SQL commands. Documents indicate this affects CS-Cart 1.3.0 and allow arbitrary SQL execution...

CVE-2005-4314

Cross-site scripting XSS vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 stop and 2 user parameters...

CVE-2005-4314

CVE-2005-4314 describes a cross-site scripting (XSS) vulnerability in the ppcal.cgi component of PPCal Shopping Cart 3.3.0 and earlier. The vulnerability allows an attacker to inject arbitrary web script or HTML via the (1) stop and (2) user parameters. Evidence from NVD states a medium severity ...

CVE-2005-4314: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 stop and 2 user parameters...

CVE-2005-4314

Cross-site scripting XSS vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 stop and 2 user parameters...