693 matches found
Information disclosure
CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/shipping/USPS/calc.php and certain other files...
CVE-2011-3724
CubeCart 4.4.3 is affected by CVE-2011-3724. A remote attacker can obtain sensitive information by directly requesting certain PHP files (e.g., modules/shipping/USPS/calc.php), causing an error message that reveals the installation path. This constitutes partial confidentiality impact. The affect...
CVE-2011-3724
CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/shipping/USPS/calc.php and certain other files...
CubeCart Multiple XSS and SQL Injection Vulnerability
CubeCart is prone to XSS and SQL injection vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cubecart:cubecart";...
cubecart 2.0.7 - Multiple Vulnerabilities
cubecart 2.0.7 - Multiple Vulnerabilities Exploit Title: CubeCart 2.0.7 XSS && Remote SQL Injection = Multiple Vulnerabilities Date: June, 14th 2011 GMT +7 Author: Shamus Software Link: http://www.cubecart.com/ Version : CubeCart 2.0.7 Tested on: windows 7, ubuntu 11.04 CVE : -...
CubeCart 2.0.7 Cross Site Scripting / SQL Injection
Exploit Title: CubeCart 2.0.7 XSS && Remote SQL Injection = Multiple Vulnerabilities Date: June, 14th 2011 GMT +7 Author: Shamus Software Link: http://www.cubecart.com/ Version : CubeCart 2.0.7 Tested on: windows 7, ubuntu 11.04 CVE : -...
CubeCart 2.0.7 Multiple Vulnerabilities
Exploit for php platform in category web applications...
cubecart 2.0.7 - Multiple Vulnerabilities
Exploit Title: CubeCart 2.0.7 XSS && Remote SQL Injection = Multiple Vulnerabilities Date: June, 14th 2011 GMT +7 Author: Shamus Software Link: http://www.cubecart.com/ Version : CubeCart 2.0.7 Tested on: windows 7, ubuntu 11.04 CVE : -...
XSS in CubeCart <= 2.0.7
CubeCart http://www.cubecart.com up to version 2.0.7 inclusive are vulnerable to a XSS in salecat.php. http://www.example.com/storedirectory/salecat.php/";scriptalertdocument.cookie/script...
CubeCart 2.0.6 XSS / SQL Injection Vulnerabilities
Exploit for php platform in category web applications Exploit Title: CubeCart 2.0.6 SQL injection / Cross Site Scripting Google Dork: "Powered by CubeCart 2.0.6" home : http://www.D99Y.com Date: 2/3/2011 Author: NassRawI Software Link: http://www.cubecart.com Version: 2.0.6 1 SQL injection file :...
CubeCart 2.0.6 SQL injection / Cross Site Scripting
Exploit Title: CubeCart 2.0.6 SQL injection / Cross Site Scripting Google Dork: "Powered by CubeCart 2.0.6" home : http://www.D99Y.com Date: 2/3/2011 Author: NassRawI Software Link: http://www.cubecart.com Version: 2.0.6 1 SQL injection file : index.php exploit : http://localhost/index.php?catid=...
CubeCart Cross Site Scripting and SQL Injection Vulnerabilities
CubeCart is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie- based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...
CubeCart 2.0.6 XSS and SQLi Vulnerabilities
CubeCart is prone to an SQL injection SQLi and a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CubeCart 2.0.6 Cross Site Scripting / SQL Injection
Exploit Title: CubeCart 2.0.6 SQL injection / Cross Site Scripting Google Dork: "Powered by CubeCart 2.0.6" home : http://www.D99Y.com Date: 2/3/2011 Author: NassRawI Software Link: http://www.cubecart.com Version: 2.0.6 1 SQL injection file : index.php exploit : http://localhost/index.php?catid=...
CubeCart 3.0.6 <= CSRF Vulnerability (Add Admin)
Exploit for php platform in category web applications Title : CubeCart 3.0.4 tnt-r00t Homepage : www.p0c.cc document.p0c.submit; NICKNAME: P0C T34M 0day.today 2018-02-17...
CubeCart <= 3.0.4 SQL Injection Vulnerability
Exploit for php platform in category web applications /////////////////////////////// 0day.today 2018-03-09...
CubeCart 3.0.6 Cross Site Request Forgery
Title : CubeCart tnt-r00t Homepage : www.p0c.cc document.p0c.submit; NICKNAME: P0C T34M...
CubeCart 3.0.6 - Cross-Site Request Forgery (Add Admin)
CubeCart 3.0.6 - Cross-Site Request Forgery Add Admin Title : CubeCart 3.0.4 tnt-r00t Homepage : www.p0c.cc document.p0c.submit; NICKNAME: P0C T34M...