56 matches found
CVE-2020-9018
LiteCart through 2.2.1 allows admin/?app=users&doc=edituser CSRF to add a user...
CVE-2020-9018
LiteCart through 2.2.1 allows admin/?app=users&doc=edituser CSRF to add a user...
Cross site request forgery (csrf)
LiteCart through 2.2.1 allows admin/?app=users&doc=edituser CSRF to add a user...
CVE-2020-9017
LiteCart through 2.2.1 allows CSV injection via a customer's profile...
CVE-2020-9017
LiteCart through 2.2.1 allows CSV injection via a customer's profile...
Design/Logic Flaw
LiteCart through 2.2.1 allows CSV injection via a customer's profile...
CVE-2020-9018
LiteCart through 2.2.1 allows admin/?app=users&doc=edituser CSRF to add a user...
CVE-2020-9018
LiteCart (versions up to 2.2.1) is affected by a Cross-Site Request Forgery in the admin interface, specifically admin/?app=users&doc=edit_user. The underlying issue enables an attacker to add a new user without proper authorization checks, as described in CVE-2020-9018. The available sources con...
CVE-2020-9017
LiteCart through 2.2.1 allows CSV injection via a customer's profile...
CVE-2020-9017
LiteCart 2.2.1 and earlier versions are affected by a CSV injection vulnerability in the customer profile handling. The issue, described across multiple sources (CVE-2020-9017 and associated records), enables CSV injection when processing profile data. Public references confirm LiteCart up to ver...
LiteCart 2.1.2 - Arbitrary File Upload Exploit
Exploit for php platform in category web applications Exploit Title: LiteCart 2.1.2 - Arbitrary File Upload Exploit Author: Haboob Team Software Link: https://www.litecart.net/downloading?version=2.1.2 Version: 2.1.2 CVE : CVE-2018-12256 1. Description admin/vqmods.app/vqmods.inc.php in LiteCart...
LiteCart 2.1.2 - Arbitrary File Upload
LiteCart 2.1.2 - Arbitrary File Upload Exploit Title: LiteCart 2.1.2 - Arbitrary File Upload Date: 2018-08-27 Exploit Author: Haboob Team Software Link: https://www.litecart.net/downloading?version=2.1.2 Version: 2.1.2 CVE : CVE-2018-12256 1. Description admin/vqmods.app/vqmods.inc.php in LiteCar...
LiteCart 2.1.2 Arbitrary File Upload
Exploit Title: LiteCart 2.1.2 - Arbitrary File Upload Date: 2018-08-27 Exploit Author: Haboob Team Software Link: https://www.litecart.net/downloading?version=2.1.2 Version: 2.1.2 CVE : CVE-2018-12256 1. Description admin/vqmods.app/vqmods.inc.php in LiteCart 2.1.2 allows remote authenticated...
LiteCart 2.1.2 - Arbitrary File Upload
Exploit Title: LiteCart 2.1.2 - Arbitrary File Upload Date: 2018-08-27 Exploit Author: Haboob Team Software Link: https://www.litecart.net/downloading?version=2.1.2 Version: 2.1.2 CVE : CVE-2018-12256 1. Description admin/vqmods.app/vqmods.inc.php in LiteCart 2.1.2 allows remote authenticated...
LiteCart File Upload Vulnerability
LiteCart is a free PHP-based e-commerce platform. The platform provides product categorization, payment checkout and search engine and other functions. A security vulnerability exists in the admin/vqmods.app/vqmods.inc.php file in LiteCart versions prior to 2.1.3. A remote attacker can exploit th...
CVE-2018-12256
admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file resulting in remote code execution by using the text/xml or application/xml Content-Type in a publichtml/admin/?app=vqmods&doc=vqmods request...
CVE-2018-12256
admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file resulting in remote code execution by using the text/xml or application/xml Content-Type in a publichtml/admin/?app=vqmods&doc=vqmods request...
Cross site request forgery (csrf)
admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file resulting in remote code execution by using the text/xml or application/xml Content-Type in a publichtml/admin/?app=vqmods&doc=vqmods request...
CVE-2018-12256
LiteCart up to version 2.1.2 is affected by an arbitrary file upload vulnerability in admin/vqmods.app/vqmods.inc.php that allows remote authenticated attackers to upload a malicious file and achieve remote code execution by sending Content-Type: text/xml or application/xml in a request to public...
CVE-2018-12256
admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file resulting in remote code execution by using the text/xml or application/xml Content-Type in a publichtml/admin/?app=vqmods&doc=vqmods request...