Cubecart < 3.0.16 HTTP Response Splitting

Binary data 3984.prm...

CubeCart &lt;= 3.0.11 (oid) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- CubeCart = 3.0.11 "oid" blind SQL injection / admin credentials disclosure exploit by rgod [email protected] site:...

CubeCart DB.Inc.PHP SQL注入漏洞

CubeCart是一款基于PHP的web应用程序。 CubeCart不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行sql注入攻击，获得敏感信息。 问题是由于'DB.Inc.PHP'脚本对用户提交的web参数缺少过滤，提交恶意sql查询作为参数数据，可更改原来的sql逻辑，获得敏感信息。 CubeCart CubeCart 3.0.14 http://www.cubecart.com ?php / Vendor : Devellion Limited 2006 Exploit: Blind SQL injection look below for more info Impac...

[Full-disclosure] CubeCart &lt;=3.0.14 Bind Sql Injection POC.

Exploit Discoverd By Novalok & Kasper Of KasaNova Security Coded By A Friend ?php / Vendor : Devellion Limited 2006 Exploit: Blind SQL injection look below for more info Impact: of Discovered by: KasaNova Security --------------------------------------------------------------------------------...

CVE-2006-5108

Multiple cross-site scripting XSS vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitrary web script or HTML via the orderid parameter in 1 admin/printorder.php and 2 vieworder.php; the 3 siteurl and 4 lasearchhome parameters and 5 certain language parameters in...

CVE-2006-5109

Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for 1 linknavi.php or 2 spotlight.php, which reveals the path in various error messages. NOTE: the information.php, language.php, listdocs.php, popularprod.php, sale.php, checksum.php, and...

CVE-2006-5107

Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL commands via 1 the username parameter in admin/forgotpass.php, 2 the orderid parameter in vieworder.php, 3 the viewdoc parameter in viewdoc.php, and 4 the orderid parameter in...

CubeCart.txt

Hello,, CubeCart Multiple input Validation vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Sql injection admin/forgotpass.php?submit=1&username=-1'or%201=1/ it will reset the password for the administrator --...

CVE-2006-5107

Affected product: Devellion CubeCart 2.0.x. The CVE describes multiple SQL injection vulnerabilities in CubeCart that allow remote attackers to execute arbitrary SQL commands. The specific vectors cited are: (1) user_name in admin/forgot_pass.php, (2) order_id in view_order.php, (3) view_doc in v...

CVE-2006-5108

CVE-2006-5108 involves multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x . The issue allows remote attackers to inject arbitrary web script or HTML via numerous parameters across several files, including: (1) order_id in admin/print_order.php and view_order.php; (2) ...

CVE-2006-5108

Multiple cross-site scripting XSS vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitrary web script or HTML via the orderid parameter in 1 admin/printorder.php and 2 vieworder.php; the 3 siteurl and 4 lasearchhome parameters and 5 certain language parameters in...

CVE-2006-5109

CVE-2006-5109 affects CubeCart 2.0.x. A direct request to (1) link_navi.php or (2) spotlight.php allows remote attackers to disclose server paths via error messages, exposing sensitive information. The issue is specific to CubeCart 2.0.x; the note clarifies that other vectors (information.php, la...

CVE-2006-5109

Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for 1 linknavi.php or 2 spotlight.php, which reveals the path in various error messages. NOTE: the information.php, language.php, listdocs.php, popularprod.php, sale.php, checksum.php, and...

CVE-2006-5107

Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL commands via 1 the username parameter in admin/forgotpass.php, 2 the orderid parameter in vieworder.php, 3 the viewdoc parameter in viewdoc.php, and 4 the orderid parameter in...

CubeCart Multiple input Validation vulnerabilities

Hello,, CubeCart Multiple input Validation vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Sql injection admin/forgotpass.php?submit=1&username=-1'or201=1/ it will reset the password for the administrator --...

CubeCart 3.0.x - adminnav.php Multiple Cross-Site Scripting Vulnerabilities

CubeCart 3.0.x - adminnav.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the applicatio...

CubeCart 3.0.x - '/admin/print_order.php?order_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...

CubeCart 3.0.x - '/admin/nav.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...

CubeCart 3.0.x - 'view_order.php?order_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...

CubeCart 3.0.x - '/admin/print_order.php?order_id' SQL Injection

source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...