LiteCart Denial of Service Vulnerability

LiteCart is a free PHP-based e-commerce platform. The platform provides product categorization, payment checkout and search engine and other functions. A security vulnerability exists in LiteCart version 2.1.2, which originates from the fact that the publichtml/logs/notfound.log file can be...

CVE-2018-10827

LiteCart before 2.1.2 allows remote attackers to cause a denial of service memory consumption via URIs that do not exist, because publichtml/logs/notfound.log grows without bound, and is loaded into memory for each request...

CVE-2018-10827

LiteCart before 2.1.2 allows remote attackers to cause a denial of service memory consumption via URIs that do not exist, because publichtml/logs/notfound.log grows without bound, and is loaded into memory for each request...

Design/Logic Flaw

LiteCart before 2.1.2 allows remote attackers to cause a denial of service memory consumption via URIs that do not exist, because publichtml/logs/notfound.log grows without bound, and is loaded into memory for each request...

CVE-2018-10827

CVE-2018-10827 affects LiteCart prior to 2.1.2. The vulnerability arises when a non-existent URI is requested, causing public_html/logs/not_found.log to grow without bound and be loaded into memory for each request, leading to memory consumption and potential denial of service. Public sources des...

CVE-2018-10827

LiteCart before 2.1.2 allows remote attackers to cause a denial of service memory consumption via URIs that do not exist, because publichtml/logs/notfound.log grows without bound, and is loaded into memory for each request...

LiteCart CMS 'order_id' Parameter Cross-Site Scripting Vulnerability

LiteCart CMS is a free PHP-based e-commerce content management system CMS. A cross-site scripting vulnerability exists in LiteCart CMS version 1.3.4. An attacker can exploit the vulnerability to execute arbitrary script code, steal cookie-based authentication and launch other attacks...

Litecart CMS 1.3.4 Cross Site Scripting

Product: Litecart CMS Vendor: Litecart Vendor Homepage: https://www.litecart.net/ Vulnerable Versions: 1.3.4 and probably prior Tested Version: 1.3.4 Issue Reported: Feb 24, 2016 Vendor Fix: Feb 28, 2016 Public Disclosure: June 25, 2014 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level:...

LiteCart 1.3.2 Cross Site Scripting Vulnerability

LiteCart version 1.3.2 suffers from a cross site scripting vulnerability. 1. Introduction Affected Product: LiteCart 1.3.2 Fixed in: 1.3.3 Fixed Version Link: https://www.litecart.net/downloading?version=1.3.3.1 Vendor Contact: email protected Vulnerability Type: XSS Remote Exploitable: Yes...

LiteCart 1.3.2 Cross Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: LiteCart 1.3.2 Fixed in: 1.3.3 Fixed Version Link: https://www.litecart.net/downloading?version=1.3.3.1 Vendor Contact: [email protected] Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 09/07/20...

LiteCart 1.1.2.1 /search.php 跨站脚本漏洞

No description provided by source...

LiteCart Security Advisory - Multiple XSS Vulnerabilities - CVE-2014-7183

Information ----------- Advisory by Netsparker. Name: Multiple XSS Vulnerabilities in LiteCart Affected Software : LiteCart Affected Versions: 1.1.2.1 and possibly below Vendor Homepage : http://www.litecart.net Vulnerability Type : Cross-site Scripting Severity : Important CVE-ID: CVE-2014-7183...

CVE-2014-7183

Multiple cross-site scripting XSS vulnerabilities in the search.php in LiteCart 1.1.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 query parameter or 2 QUERYSTRING...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the search.php in LiteCart 1.1.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 query parameter or 2 QUERYSTRING...

CVE-2014-7183

LiteCart 1.1.2.1 (and possibly older) is affected by multiple XSS in search.php via the query parameter or the QUERY_STRING. The underlying issue is a cross-site scripting vulnerability in LiteCart’s search handling. The Netsparker advisory notes that the vendor released a fix on or around 29/09/...

LiteCart 1.1.2.1 Cross Site Scripting

Information ----------- Advisory by Netsparker. Name: Multiple XSS Vulnerabilities in LiteCart Affected Software : LiteCart Affected Versions: 1.1.2.1 and possibly below Vendor Homepage : http://www.litecart.net Vulnerability Type : Cross-site Scripting Severity : Important CVE-ID: CVE-2014-7183...