739 matches found
CVE-2006-0064
PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute arbitrary PHP code via a URL in the globrootDir parameter...
CVE-2006-0064
The CVE-2006-0064 entry concerns CubeCart. Multiple connected records confirm a PHP remote file inclusion vulnerability in includes/orderSuccess.inc.php, exploitable via a URL parameter glob[rootDir] that allows execution of arbitrary PHP code. This indicates a client-controllable file inclusion ...
CVE-2006-0064: Improper Control of Generation of Code
PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute arbitrary PHP code via a URL in the globrootDir parameter...
cijfer-ccxpl.pl.txt
!/usr/bin/perl cijfer-ccxpl - CubeCart All rights reserved. 1. example cijfer@kalma:/research$ perl ./cijfer-ccxpl.pl -h www.xxx.com -d [email protected] /$ id;uname -a uid=48apache gid=48apache groups=48apache,2523psaserv Linux server.xxx.com 2.6.10-1.771FC2 1 Mon Mar 28 00:50:14 EST 2005 i686...
CubeCart <= 3.0.6 Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl cijfer-ccxpl - CubeCart =3.0.6 Remote Command Execution Exploit Copyright c 2005 cijfer [email protected] All rights reserved. 1. example cijfer@kalma:/research$ perl ./cijfer-ccxpl.pl -h www.xxx.com -d [email protected] /$ id;uname -a uid=48apache...
CubeCart 3.0.6 - Remote Command Execution
CubeCart 3.0.6 - Remote Command Execution !/usr/bin/perl cijfer-ccxpl - CubeCart All rights reserved. 1. example cijfer@kalma:/research$ perl ./cijfer-ccxpl.pl -h www.xxx.com -d [email protected] /$ id;uname -a uid=48apache gid=48apache groups=48apache,2523psaserv Linux server.xxx.com...
CubeCart <= 3.0.6 Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================== CubeCart All rights reserved. 1. example email protected:/research$ perl ./cijfer-ccxpl.pl -h www.xxx.com -d email protected /$ id;uname -a uid=48apache gid=48apache...
CubeCart 3.0.6 - Remote Command Execution
!/usr/bin/perl cijfer-ccxpl - CubeCart All rights reserved. 1. example cijfer@kalma:/research$ perl ./cijfer-ccxpl.pl -h www.xxx.com -d [email protected] /$ id;uname -a uid=48apache gid=48apache groups=48apache,2523psaserv Linux server.xxx.com 2.6.10-1.771FC2 1 Mon Mar 28 00:50:14 EST 2005 i686...
Brooky CubeCart index.php language XSS
The remote host runs CubeCart, is an eCommerce script written with PHP & MySQL. This version is vulnerable to cross-site scripting and remote script injection due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to execute malicious scri...
CubeCart < 2.0.5 index.php language XSS Vulnerability
CubeCart is prone to cross-site scripting XSS and remote script injection vulnerabilities due to a lack of sanitization of user-supplied data. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...
CubeCart < 3.0.4 Multiple Script XSS
The remote version of CubeCart contains several cross-site scripting vulnerabilities due to its failure to properly sanitize user-supplied input of certain variables to the 'index.php' and 'cart.php' scripts. %NASLMINLEVEL 70300 Josh Zlatin-Amishav This script is released under the GNU GPLv2...
CVE-2005-3152
Multiple cross-site scripting XSS vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to 1 cart.php or 2 index.php, or 3 the searchStr parameter in a viewCat action to index.php. Note: vectors 1 and 2 were later reported to affec...
CVE-2005-3152
Multiple cross-site scripting XSS vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to 1 cart.php or 2 index.php, or 3 the searchStr parameter in a viewCat action to index.php. Note: vectors 1 and 2 were later reported to affec...
CVE-2005-3152
CubeCart XSS vulnerabilities (CVE-2005-3152) affect CubeCart 3.0.3 and later reports show impact extending to 3.0.7-pl1. The issues arise from failure to properly sanitize user input in scripts such as index.php and cart.php, enabling remote attackers to inject arbitrary HTML/JavaScript. Exploita...
CVE-2005-3152: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to 1 cart.php or 2 index.php, or 3 the searchStr parameter in a viewCat action to index.php. Note: vectors 1 and 2 were later reported to affec...
Brooky CubeCart < 3.0.4 Multiple XSS
Binary data 3244.prm...
cubecart-3.0.3.txt
CubeCart 3.0.3 multiple variable Cross site scripting Vendor url: www.cubecart.com bug report:http://bugs.cubecart.com/?do=details&id=363 Advisore:http://lostmon.blogspot.com/2005/09/ cubecart-303-multiple-variable-cross.html vendor confirmed: yes exploit avalable: yes Fix available: yes CubeCar...
CubeCart 3.0.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/14962/info CubeCart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code execut...
CubeCart 3.0.3 - cart.php?redir Cross-Site Scripting
CubeCart 3.0.3 - cart.php?redir Cross-Site Scripting source: https://www.securityfocus.com/bid/14962/info CubeCart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any...
CubeCart 3.0.3 - index.php Multiple Cross-Site Scripting Vulnerabilities
CubeCart 3.0.3 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14962/info CubeCart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...