689 matches found
CubeCart 3.0.x - adminforgot_pass.php?user_name SQL Injection
CubeCart 3.0.x - adminforgotpass.php?username SQL Injection source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to...
CubeCart 3.0.x - view_order.php?order_id SQL Injection
CubeCart 3.0.x - vieworder.php?orderid SQL Injection source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly...
CubeCart 3.0.x - footer.inc.php?la_pow_by Cross-Site Scripting
CubeCart 3.0.x - footer.inc.php?lapowby Cross-Site Scripting source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to...
CubeCart 3.0.x - view_order.php?order_id Cross-Site Scripting
CubeCart 3.0.x - vieworder.php?orderid Cross-Site Scripting source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to...
CubeCart 3.0.x - adminimage.php?image Cross-Site Scripting
CubeCart 3.0.x - adminimage.php?image Cross-Site Scripting source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to proper...
CubeCart 3.0.x - 'view_doc.php?view_doc' SQL Injection
source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...
CubeCart 3.0.x - 'footer.inc.php?la_pow_by' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...
CubeCart 3.0.x - '/admin/forgot_pass.php?user_name' SQL Injection
source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...
CubeCart 3.0.x - adminheader.inc.php Multiple Cross-Site Scripting Vulnerabilities
CubeCart 3.0.x - adminheader.inc.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the...
CubeCart 3.0.x - view_doc.php?view_doc SQL Injection
CubeCart 3.0.x - viewdoc.php?viewdoc SQL Injection source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly...
CubeCart 3.0.x - adminprint_order.php?order_id Cross-Site Scripting
CubeCart 3.0.x - adminprintorder.php?orderid Cross-Site Scripting source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to...
CubeCart 3.0.x - '/admin/image.php?image' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...
CubeCart 3.0.x - '/admin/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...
CVE-2006-4525
Cross-site scripting XSS vulnerability in CubeCart 3.0.12 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the links array...
CVE-2006-4527
includes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magicquotesgpc is disabled, uses an insufficiently restrictive regular expression to validate the gateway parameter, which allows remote attackers to conduct PHP remote file inclusion attacks...
CVE-2006-4526
SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the searchArray parameter...
CVE-2006-4527
CVE-2006-4527 affects CubeCart 3.0.12 and earlier, where includes/content/gateway.inc.php validates the gateway parameter with an insufficiently restrictive regex when magic_quotes_gpc is disabled, enabling remote PHP remote file inclusion. Connected sources confirm the issue and reference CubeCart
CVE-2006-4527
includes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magicquotesgpc is disabled, uses an insufficiently restrictive regular expression to validate the gateway parameter, which allows remote attackers to conduct PHP remote file inclusion attacks...