CVE-2015-3421: Improper Neutralization of Input During Web Page Generation

The eshopcheckout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and earlier does not validate variables in the "eshopcart" HTTP cookie, which allows remote attackers to perform cross-site scripting XSS attacks, or a path disclosure attack via crafted variables named after target P...

tweedehandspcs.nl XSS vulnerability

Vulnerable URL: http://www.tweedehandspcs.nl/tweedehandspcs/checkout.php?cartid=1263604699=1=1"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

7cups.com XSS vulnerability

Vulnerable URL: https://www.7cups.com/backus/checkout.php?subType=upgrade="=95.88=annual Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35487 Google Pagerank| 0 VIP website status:...

CVE-2014-8307

Multiple cross-site scripting XSS vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter in the "drop down TOP menu with path" section or 2 printthispage variable in the footercontentbloc...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter in the "drop down TOP menu with path" section or 2 printthispage variable in the footercontentbloc...

CVE-2012-4241: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Microcart 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO or 2 query string to admin/index.php or 3 firstname, 4 lastname, 5 cc, 6 exp, 7 cvv, 8 address1, 9 address2, 10 city, 11 state, 12 zip, 13 phone, or ...

PT-2014-2279

Name of the Vulnerable Software and Affected Versions Microcart version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can occur through various means, including the PATH INFO or query string ...

Microcart 1.0 Checkout Cross Site Scripting

Exploit for php platform in category web applications /-------------------------------------------------------------------\ | Microcart 1.0 Checkout Cross-Site Scripting Security Vulnerability | -------------------------------------------------------------------/ Summary ======= Microcart 1.0 is...

Unfixed XSS vulnerability at secure.hartvilletool.com

Security researcher lithium9, has submitted on 15/12/2009 a cross-site-scripting XSS vulnerability affecting secure.hartvilletool.com, which at the time of submission ranked 758241 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It ...

Unfixed XSS vulnerability at avalanche.websitewelcome.com

Security researcher lithium9, has submitted on 15/12/2009 a cross-site-scripting XSS vulnerability affecting avalanche.websitewelcome.com, which at the time of submission ranked 2478 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. I...

Unfixed XSS vulnerability at secure.hitchcocksmotorcycles.com

Security researcher lithium9, has submitted on 15/12/2009 a cross-site-scripting XSS vulnerability affecting secure.hitchcocksmotorcycles.com, which at the time of submission ranked 1920720 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in checkout.php in Avactis Shopping Cart 1.8.0 and 1.8.1 allow remote attackers to inject arbitrary web script or HTML via the 1 stepid and 2 CHECKOUTCZBLOWFISHKEY parameters...

CVE-2008-6969: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in checkout.php in Avactis Shopping Cart 1.8.0 and 1.8.1 allow remote attackers to inject arbitrary web script or HTML via the 1 stepid and 2 CHECKOUTCZBLOWFISHKEY parameters...

Remote file inclusion

PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php and 2 checkout.php...

CVE-2008-0287

PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php and 2 checkout.php...

CVE-2008-0287: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php and 2 checkout.php...

vcart 3.3.2 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== vcart 3.3.2 Multiple Remote File Inclusion Vulnerabilities ==========================================================...

vcart 3.3.2 - Multiple Remote File Inclusions

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : vcart version 3.3.2 Discovered By : k1n9k0ng Scripts site : http://www.visionburst.com/ Thanks To : sekuritionline, semprol, bajingan, mimid, r.i.p, x-code, yogyafree special To : adhietslank, suka...

CVE-2007-2559: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in american cart 3.5 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php, 2 checkout.php, and 3 libsecure.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php or 2 checkout.php...