CVE-2004-2448

S-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the database name...

CVE-2004-2448: Undefined Security Weakness

S-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the database name...

CVE-2005-2623

ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost...

CVE-2005-2623

ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost...

CVE-2005-2623

ECW-Shop 6.0.2 is affected. A remote attacker can specify a negative quantity for an item, causing the item price to be subtracted from the cart total, which impacts cart integrity. The NVD entry notes a base score of 5.0 (Medium) with the impact on integrity as PARTIAL and no confidentiality or ...

CVE-2005-2623: Undefined Security Weakness

ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost...

CVE-2004-2411

The CVE-2004-2411 entry concerns VP-ASP Shopping Cart versions 4.0–5.0 where the CleanseMessage function in shop$db.asp does not adequately sanitize inputs. This permits remote XSS attacks that do not rely on traditional [removed] tags, demonstrated via javascript in IMG tags affecting the cat pa...

CVE-2004-2413

CVE-2004-2413 : A SQL injection vulnerability affects VP-ASP Shopping Cart versions 4.0 through 5.0. The flaw allows remote attackers to execute arbitrary SQL commands via the POST parameters (Processed0 and Processed1) to shopproductselect.asp. This vulnerability could lead to partial confidenti...

CVE-2004-2411

The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting XSS attacks that do not use tags, as demonstrated via javascript in IMG tags to 1 the cat parameter in...

CVE-2004-2412

Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in 1 shopreviewlist.asp and 2 shopreviewadd.asp...

CVE-2004-2413

SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL commands via the 1 Processed0 and 2 Processed1 parameters in a POST request to shopproductselect.asp...

CVE-2004-2412

CVE-2004-2412 involves VP-ASP Shopping Cart 4.0–5.0 with SQL injection vulnerabilities in the catalogid parameter of the two endpoints, shopreviewlist.asp and shopreviewadd.asp . The vulnerability enables remote attackers to execute arbitrary SQL commands against the underlying database, as state...

CVE-2004-2411: Undefined Security Weakness

The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting XSS attacks that do not use...

CVE-2004-2413: Undefined Security Weakness

SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL commands via the 1 Processed0 and 2 Processed1 parameters in a POST request to shopproductselect.asp...

CVE-2004-2412: Undefined Security Weakness

Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in 1 shopreviewlist.asp and 2 shopreviewadd.asp...

ECWshop.txt

Hello All, I have discovered a number of remote vulnerabilities in: ECW Shop 6.0.2 Authors Site: http://www.soft4e.com/ ECW Shop is described by its authors as: ECW-Shop - simple for use featured shopping cart with ability to use Excel or Access format for database...

[NOBYTES.COM: #9] ECW Shop 6.0.2 - Multiple Vulnerabilities

Hello All, I have discovered a number of remote vulnerabilities in: ECW Shop 6.0.2 Authors Site: http://www.soft4e.com/ ECW Shop is described by its authors as: ECW-Shop - simple for use featured shopping cart with ability to use Excel or Access format for database...

xcartGold.txt

SVadvisory7 Title: Multiple vulnerabilities in x-cart Gold The program: x-cart Gold The vulnerable version: 4.0.8 Homepage: www.x-cart.com Vulnerability is found: 29.05.05 Has found: CENSORED / SVT / www.svt.nukleon.us ===================================================================== The...

Hackgen Security Advisory 2005.4

http://www.hackgen.org/advisories/hackgen-2005-004.txt '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' hackgen-2005-004 ' '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' Multiple bugs in MidiCart PHP Shopping Cart '...

CVE-2005-2477

The CVE-2005-2477 entry concerns Naxtor Shopping Cart 1.0. The vulnerability is triggered by a cat_id value containing a single quote, causing an error message that reveals sensitive information and suggests a possible SQL injection. The available documents describe the affected software and the ...