693 matches found
CubeCart 3.0.20 SQL Injection
OVERVIEW The CubeCart 3.0.20 and lower versions are vulnerable to SQL Injection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...
CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability [Updated]
OVERVIEW The CubeCart 3.0.20 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful...
CVE-2012-0865
Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 1 r parameter to switch.php or 2 goto parameter to admin/login.php...
Open redirect
Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 1 r parameter to switch.php or 2 goto parameter to admin/login.php...
CVE-2012-0865
Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 1 r parameter to switch.php or 2 goto parameter to admin/login.php...
CVE-2012-0865
CVE-2012-0865 affects CubeCart 3.0.20 and earlier. The issue is open redirect vulnerabilities in which an attacker can cause a user to be redirected to an arbitrary site via vulnerable URL parameters: (1) r in switch.php and (2) goto in admin/login.php. This can enable phishing or drive-by redire...
CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability
OVERVIEW The CubeCart 3.0.20 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful...
CubeCart 3.0.20 Open Redirection
OVERVIEW The CubeCart 3.0.20 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful...
CubeCart 3.0.20 - Multiple Script 'redir' Arbitrary Site Redirects
source: https://www.securityfocus.com/bid/51966/info CubeCart is prone to a URI-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. CubeCart 3.0.20 is vulnerable; other...
CubeCart 3.0.20 - 'switch.php?r' Arbitrary Site Redirect
source: https://www.securityfocus.com/bid/51966/info CubeCart is prone to a URI-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. CubeCart 3.0.20 is vulnerable; other...
CubeCart 3.0.20 - '/admin/login.php?goto' Arbitrary Site Redirect
source: https://www.securityfocus.com/bid/51966/info CubeCart is prone to a URI-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. CubeCart 3.0.20 is vulnerable; other...
CubeCart 3.0.20 - switch.php?r Arbitrary Site Redirect
CubeCart 3.0.20 - switch.php?r Arbitrary Site Redirect source: https://www.securityfocus.com/bid/51966/info CubeCart is prone to a URI-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attack...
CubeCart 3.0.20 - adminlogin.php?goto Arbitrary Site Redirect
CubeCart 3.0.20 - adminlogin.php?goto Arbitrary Site Redirect source: https://www.securityfocus.com/bid/51966/info CubeCart is prone to a URI-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other...
CubeCart 3.0.20 - Multiple Script redir Arbitrary Site Redirects
CubeCart 3.0.20 - Multiple Script redir Arbitrary Site Redirects source: https://www.securityfocus.com/bid/51966/info CubeCart is prone to a URI-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks;...
CubeCart Multiple Cross-Site Scripting and SQL Injection Vulnerabilities
CubeCart is prone to SQL injection and multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2010-4903
SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter...
Sql injection
SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter...
CVE-2010-4903
CVE-2010-4903 : CubeCart 4.3.3 contains a vulnerability in index.php where the searchStr parameter enables an SQL injection, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and low complexity, no authentication...
CVE-2010-4903
SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter...
CVE-2011-3724
CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/shipping/USPS/calc.php and certain other files...