TomatoCart - 'json.php' Security Bypass

source: https://www.securityfocus.com/bid/57156/info TomatoCart is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and create files with arbitrary shell script which may aid in further attacks. TomatoCart versions 1.1.5 and 1.1....

TomatoCart 1.x Unrestricted File Creation

OVERVIEW TomatoCart 1.x versions are vulnerable to Unrestricted File Creation. 2. BACKGROUND TomatoCart is an innovative Open Source shopping cart solution developed by Wuxi Elootec Technology Co., Ltd. It is forked from osCommerce 3 as a separate project and is released under the GNU General...

TomatoCart - json.php Security Bypass

TomatoCart - json.php Security Bypass source: https://www.securityfocus.com/bid/57156/info TomatoCart is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and create files with arbitrary shell script which may aid in further...

TomatoCart 'json.php' Directory Traversal Vulnerability

TomatoCart is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-5907

Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary files via a .. dot dot in the module parameter in a "3" action...

Directory traversal

Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary files via a .. dot dot in the module parameter in a "3" action...

CVE-2012-5907

CVE-2012-5907 corresponds to a directory traversal vulnerability in TomatoCart's json.php (TomatoCart 1.2.0 Alpha 2 and possibly earlier). The issue allows remote attackers to read arbitrary files by injecting a .. in the module parameter for a "3" action, effectively a Local File Inclusion (LFI)...

CVE-2012-5907

Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary files via a .. dot dot in the module parameter in a "3" action...

CVE-2012-4934

TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL...

Design/Logic Flaw

TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL...

CVE-2012-4934

TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL...

CVE-2012-4934

TomatoCart 1.1.7 (and possibly other versions) with the PayPal Express Checkout module in sandbox mode contains a design/logic flaw that may allow an attacker who is authenticated to bypass payment requirements by manipulating the PayPal redirect URL from PayPal back to TomatoCart. The result can...

TomatoCart with PayPal Express Checkout design flaw vulnerability

Overview TomatoCart 1.1.7 with PayPal Express Checkout, and possibly other versions, contains a design flaw that may allow an attacker to purchase items for free or less than advertised. Description It has been reported that TomatoCart 1.1.7 using the PayPal Express Checkout module in sandbox mod...

TomatoCart 1.2.0 Alpha 2 Local File Inclusion Vulnerability

TomatoCart version 1.2.0 Alpha 2 suffers from a local file inclusion vulnerability. Information -------------------- Name : Local File Inclusion Vulnerability in TomatoCart Software : TomatoCart 1.2.0 Alpha 2 and possibly below. Vendor Homepage : http://www.tomatocart.com Vulnerability Type : Loc...

TomatoCart - example_form.ajax.php Cross-Site Scripting

TomatoCart - exampleform.ajax.php Cross-Site Scripting source: https://www.securityfocus.com/bid/55295/info TomatoCart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code i...

TomatoCart 1.1.7 Cross Site Scripting

------------------------------------------------------------- Name : TomatoCart 1.1.7 XSS ------------------------------------------------------------- Date : 29.08.2012 ------------------------------------------------------------- Site : www.tomatocart.com...

TomatoCart - 'example_form.ajax.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55295/info TomatoCart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

TomatoCart 1.2.0 Alpha 2 Local File Inclusion

Information -------------------- Name : Local File Inclusion Vulnerability in TomatoCart Software : TomatoCart 1.2.0 Alpha 2 and possibly below. Vendor Homepage : http://www.tomatocart.com Vulnerability Type : Local File Inclusion Severity : Critical Researcher : Canberk Bolat Advisory Reference ...

TomatoCart 1.2.0 Alpha 2 - json.php Local File Inclusion

TomatoCart 1.2.0 Alpha 2 - json.php Local File Inclusion source: https://www.securityfocus.com/bid/52766/info TomatoCart is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially...

TomatoCart 1.2.0 Alpha 2 - 'json.php' Local File Inclusion

source: https://www.securityfocus.com/bid/52766/info TomatoCart is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scrip...