622 matches found
Devellion Cubecart 授权问题漏洞
Devellion CubeCart is a free and open source e-commerce shopping cart software from the company of Devellion UK. The software supports selling products, adding/editing products or images in an online store, etc. A security vulnerability exists in Cubecart version 6.4.2, which stems from the...
Devellion CubeCart SQL Injection Vulnerability
Devellion CubeCart is a free and open source e-commerce shopping cart software from Devellion UK. The software supports selling products in an online store, adding/editing products or images etc. A SQL injection vulnerability exists in Devellion CubeCart versions prior to 6.1.13, which can be...
Sql injection
CubeCart before 6.1.13 has SQL Injection via the validate parameter of the "I forgot my Password!" feature...
CVE-2018-20716
CubeCart before 6.1.13 has SQL Injection via the validate parameter of the "I forgot my Password!" feature...
CVE-2018-20716
CubeCart before 6.1.13 has SQL Injection via the validate parameter of the "I forgot my Password!" feature...
CVE-2018-20716
CubeCart before 6.1.13 has SQL Injection via the validate parameter of the "I forgot my Password!" feature...
CVE-2018-20716
CubeCart prior to 6.1.13 is vulnerable to SQL Injection via the validate[] parameter in the "I forgot my Password!" feature. Root cause: improper input handling in the forgot-password logic. Impact as stated: high/critical risk (partial confidentiality, integrity, and availability). No exploitati...
CubeCart Cross-Site Scripting Vulnerability
Devellion CubeCart is a free and open source e-commerce shopping cart software from Devellion UK. The software supports selling products in an online store, adding/editing products or images etc. A cross-site scripting vulnerability exists in Devellion CubeCart version 6.2.2. A remote attacker ca...
CVE-2018-20703
CubeCart 6.2.2 has Reflected XSS via a /ADMIN-FILE/ query string...
CVE-2018-20703
CubeCart 6.2.2 has Reflected XSS via a /ADMIN-FILE/ query string...
Design/Logic Flaw
CubeCart 6.2.2 has Reflected XSS via a /ADMIN-FILE/ query string...
CVE-2018-20703
CubeCart v6.2.2 is affected by a Reflected XSS vulnerability exposed via a /{ADMIN-FILE}/ query string. The issue is described consistently across multiple sources (NVD and related feeds) as CubeCart 6.2.2 Reflected XSS. The root cause in the public descriptions is not dissected beyond the query ...
CVE-2018-20703
CubeCart 6.2.2 has Reflected XSS via a /ADMIN-FILE/ query string...
CubeCart 6.2.2 Cross Site Scripting
Reflected Cross-site Scripting Vulnerability in CubeCart 6.2.2 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting Vulnerability in CubeCart Affected Software: CubeCart Affected Versions: 6.2.2 Homepage: https://www.cubecart.com/ Vulnerability: Reflected...
CubeCart 6.2.2 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Reflected Cross-site Scripting Vulnerability in CubeCart 6.2.2 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting Vulnerability in CubeCart Affected Software: CubeCart Affected Versions: 6.2.2 Homepage...
CubeCart < 3.0.12 - Multiple Vulnerabilities
Exploit for php platform in category web applications CubeCart Multiple Vulnerabilities Vendor: Devellion Limited Product: CubeCart Version: = 3.0.12 Website: http://www.cubecart.com BID: 19782 CVE: CVE-2006-4525 OSVDB: 28279 28280 28281 SECUNIA: 21659 Description: CubeCart is a very popular web...
CubeCart 6.1.12 - Admin Authentication Bypass
I Forgot My Password! Both vulnerabilities are exploitable through CubeCarts "I forgot my Password!" functionality. It is implemented in the file classes/cubecart.class.php, in the method recovery. When a user forgot his password, he can use this feature to enter his email address, a valid passwo...
CVE-2017-2117
Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors...