347 matches found
Comersus Open Technologies Comersus 5.0 - 'comersus_gatewayPayPal.asp' Price Manipulation
source: https://www.securityfocus.com/bid/10674/info Comersus Cart is reported prone to multiple vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks and manipulate parameters to change the price of an order. Comersus Cart version 5.09 is affected by...
Comersus Open Technologies Comersus 5.0 - comersus_gatewayPayPal.asp Price Manipulation
Comersus Open Technologies Comersus 5.0 - comersusgatewayPayPal.asp Price Manipulation source: https://www.securityfocus.com/bid/10674/info Comersus Cart is reported prone to multiple vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks and manipulat...
Comersus Open Technologies Comersus 5.0 - 'comersus_message.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/10674/info Comersus Cart is reported prone to multiple vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks and manipulate parameters to change the price of an order. Comersus Cart version 5.09 is affected by...
ShopFactory shopping cart price manipulation
Trust Factory Security Advisory TF20021004 Discovery Date: October 4, 2002 Release Date: December 2, 2002 ID: TF20021004 Title: ShopFactory shopping cart price manipulation Impact: Customers can modify the price of items at will Affected Technology: Online shopping carts created with ShopFactory...
itransact.txt
From: "Jesse S. Williams" Subject: A security flaw itransact.com Date: Fri, 14 Dec 2001 22:39:02 -0500 -- Snip -- I believe I have found a security hole in the itransact.com payment accepting scripts. Currently, the scripts do not require the POST of forms to come from within your own site or...
Дырки в CyberOffice Shopping Cart
Можно поменять стоимость заказа и получить доступ к базе данных сервера...
spad01.txt
Security Point [email protected] www.secpoint.com/advis.html Advisory 001 Title: Java Internet Shop Vulnerability Date: 31-05-00 Copyright c 2000 SECURITY POINT Contents: ========= I Disclaimer II Introduction III Description IV Fix V Contact VI Vulnerable sites VII Job Offers VIII Greetings I -...