3080 matches found
AgoraCart agora.cgi cart_id Parameter XSS
Agora is a CGI-based, e-commerce package. Due to poor input validation, Agora allows an attacker to execute cross-site scripting attacks. %NASLMINLEVEL 70300 This script was written by Matt Moore See the Nessus Scripts License for details include'deprecatednasllevel.inc'; include'compat.inc'; if...
Aktivate Shopping System Cross Site Scripting Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aktivate Shopping System Cross Site Scripting Vulnerability Type: Cross Site Scripting Release Date: December 18, 2001 Product / Vendor: Aktivate is a complete, end-to-end e-commerce solution aimed at Linux and other Unices. Aktivate is targeted at...
iBill Management Script - Weak Hard-Coded Password
source: https://www.securityfocus.com/bid/3476/info iBill is an Internet billing company that provides secure payment processing for e-commerce. A vulnerability exists in iBill's CGI password management script called ibillpm.pl. The default password is the client's MASTERACCOUNT name plus two low...
CVE-2001-0614
Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL...
CVE-2001-0614
Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL...
CVE-2001-0614
CVE-2001-0614 affects Carello E-Commerce. Connected sources confirm a remote command-execution vulnerability in Carello.dll up to version 1.3, exploitable via a specially crafted URL, allowing arbitrary commands with the web server’s privileges. Impact is described as remote code execution with w...
def-2001-25: Carello E-Commerce Arbitrary Command Execution
====================================================================== Defcom Labs Advisory def-2001-25 Carello E-Commerce Arbitrary Command Execution Author: Peter Grьndl [email protected] Release Date: 2001-05-14 ======================================================================...
Re: Passwords in Net.Commerce/WebSphere decryptable, any version
IBM Global Services Managed Security Services Outside Advisory Redistribution 8 MAR 2001 2:11 GMT MSS-OAR-E01-2001:087.1 =========================================================================== The MSS Outside Advisory Redistribution is designed to provide customers of IBM Managed Security...
Revival of the SUQ.DIQ homepage
Lots of people have requested the SUQ.DIQ package since the closing of the SUQ.DIQ website. Did you all notice how IBMs stocks dropped after the release of this "exploit" and the rather aggresive advisory released by IBM seemed only to make it worse? I can imagine it's a bit of a set back for IBM...
McMurtreyWhitaker Associates Cart32 3.03.13.5 - Denial of Service
McMurtreyWhitaker Associates Cart32 3.03.13.5 - Denial of Service source : https://www.securityfocus.com/bid/1934/info Cart32 is a shopping cart application for e-commerce enabled sites. Cart32 is subject to a denial of service. When requesting a specially formed URL the application will cause th...
McMurtreyWhitaker Associates Cart32 3.03.13.5 - Full Path Disclosure
McMurtreyWhitaker Associates Cart32 3.03.13.5 - Full Path Disclosure source : https://www.securityfocus.com/bid/1932/info Cart32 is a shopping cart application for e-commerce enabled sites. Cart32 contains a vulnerability which reveals server information. Requesting a specially crafted URL, by wa...
McMurtrey/Whitaker & Associates Cart32 3.0/3.1/3.5 - Full Path Disclosure
source : https://www.securityfocus.com/bid/1932/info Cart32 is a shopping cart application for e-commerce enabled sites. Cart32 contains a vulnerability which reveals server information. Requesting a specially crafted URL, by way of the CGI application, will reveal the physical path to the web ro...
McMurtrey/Whitaker & Associates Cart32 3.0/3.1/3.5 - Denial of Service
source : https://www.securityfocus.com/bid/1934/info Cart32 is a shopping cart application for e-commerce enabled sites. Cart32 is subject to a denial of service. When requesting a specially formed URL the application will cause the CPU utilization to spike to 100%. A restart of the application i...
Smartwin Technology CyberOffice Shopping Cart 2.0 - Price Modification
Smartwin Technology CyberOffice Shopping Cart 2.0 - Price Modification source: https://www.securityfocus.com/bid/1733/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. The order form CyberOffice Shoppi...
Smartwin Technology CyberOffice Shopping Cart 2.0 - Price Modification
source: https://www.securityfocus.com/bid/1733/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. The order form CyberOffice Shopping Cart utilizes can be easily modified by downloading the form locally...
ACROS-2000-04-06-1-PUB
=====BEGIN-ACROS-REPORT===== ========================================================================= ACROS Security Problem Report 2000-04-06-1-PUB ------------------------------------------------------------------------- Bypassing Warnings For Invalid SSL Certificates In Netscape Navigator...
TalentSoft Web+ 4.x - Directory Traversal
source: https://www.securityfocus.com/bid/1102/info Web+ is an e-commerce server designed to run under a webserver, to provide web storefronts. The various scripts that are required to do this are specified to the webpsvr daemon via a 'script' variable passed to the webplus CGI. This CGI can be...
Netscape PublishingXPert 2.0/2.2/2.5 - Local File Reading
// source: https://www.securityfocus.com/bid/2920/info Netscape PublishingXpert is an e-commerce application distributed by Netscape. PublishingXpert manages user information, sending them special ads and personalized content. PSCOErrPage.htm does not sufficiently validate input. A problem with...
domino3.txt
L0pht Security Advisory ------------- URL Origin: http://www.l0pht.com/advisories.html Release Date: October 9th, 1998 Application: Lotus Domino Severity: Web users can retrieve sensitive data in many Domino based Internet applications Author: [email protected] Operating Sys: All platforms...
