105 matches found
CVE-2008-4140
Cross-site scripting XSS vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string...
Cross site scripting
Cross-site scripting XSS vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string...
[NOBYTES.COM: #13] Quick.Cart v3.1 Freeware - Cross Site Scripting
Application: Quick.Cart v3.1 Freeware Authors Site: http://opensolution.org/quick.cart,en,9.html +--------------------------------------------------------------+ XSS: http://www.victim.com/admin.php?"scriptalertdocument.cookie/script" +-Notes:-----------------------------------------------------+...
CVE-2008-4140
Cross-site scripting XSS vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string...
CVE-2008-4140
CVE-2008-4140 is an XSS vulnerability in Quick.Cart 3.1, exploitable via the query string to admin.php. The issue arises from unsanitized input in the admin.php handling, allowing remote attackers to inject arbitrary web script or HTML. The CVE’s context indicates the vulnerability affects Quick....
quickcart-xss.txt
Application: Quick.Cart v3.1 Freeware Authors Site: http://opensolution.org/quick.cart,en,9.html +--------------------------------------------------------------+ XSS: http://www.victim.com/admin.php?"alertdocument.cookie" +-Notes:-----------------------------------------------------+ This only...
Default credentials
config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php. NOTE: this can be leveraged to upload and execute arbitrary code...
CVE-2007-3139
config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php. NOTE: this can be leveraged to upload and execute arbitrary code...
CVE-2007-3138
Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in an sLanguage cookie, which is used to define a value in config/general.php...
CVE-2007-3139
config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php. NOTE: this can be leveraged to upload and execute arbitrary code...
CVE-2007-3138
CVE-2007-3138 affects Open Solution Quick.Cart 2.2 and earlier. A directory traversal flaw allows remote attackers to cause local file inclusion via a .. in the sLanguage cookie, which is used to define a value in config/general.php. The vulnerability can impact confidentiality, integrity, and av...
CVE-2007-3138
Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in an sLanguage cookie, which is used to define a value in config/general.php...
CVE-2007-3139
The CVE-2007-3139 entry applies to Quick.Cart versions 2.2 and earlier. According to connected records, the root cause is in config/general.php where a default username and password are used, permitting remote attackers to authenticate via an admin.php login action. The practical consequence is t...
quickcart-exec.txt
?php / Exploit Name: Quick.Cart = v2.2 Remote Local Include Exploit & Remote Code Execution Exploit Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Kacper Hacking & Security Blog: http://kacper.bblog.pl/ Irc: irc.milw0rm.com:6667 devilteam Pozdro dla wszystkich z...
Quick.Cart <= 2.2 RFI/LFI Remote Code Execution Exploit
Exploit for unknown platform in category web applications ======================================================= Quick.Cart 126...
Quick.Cart <= 2.2 RFI/LFI Remote Code Execution Exploit
No description provided by source. ?php / Exploit Name: Quick.Cart = v2.2 Remote Local Include Exploit & Remote Code Execution Exploit Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Kacper Hacking & Security Blog: http://kacper.bblog.pl/ Irc: irc.milw0rm.com:6667...
Quick.Cart 2.2 - LocalRemote File Inclusion Remote Code Execution
Quick.Cart 2.2 - LocalRemote File Inclusion Remote Code Execution ?php / Exploit Name: Quick.Cart = v2.2 Remote Local Include Exploit & Remote Code Execution Exploit Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Kacper Hacking & Security Blog:...
Quick.Cart 2.2 - Local/Remote File Inclusion / Remote Code Execution
126 $result.=" ."; else $result.=" "...