CVE-2011-3811

TomatoCart 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/system/offline.php and certain other files...

Information disclosure

TomatoCart 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/system/offline.php and certain other files...

CVE-2011-3811

TomatoCart 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/system/offline.php and certain other files...

CVE-2011-3811

The CVE-2011-3811 entry concerns TomatoCart 1.1.3, where a vulnerability allows remote attackers to disclose sensitive information by requesting a .php file directly, causing an error message that reveals the installation path (e.g., templates/system/offline.php and similar files). The root cause...

TomatoCart 1.1 pre-authentication local file inclusion flaw and fix-vulnerability warning-the black bar safety net

Title: TomatoCart 1.1 PostAuth Local File Include Author: brainpillow Download address Affect version: 1.1 Defect code analysis: if $osCCustomer-isLoggedOn === true if isset$REQUEST'module' $module = $REQUEST'module'; $osCLanguage-load$module; www.badguest.cn if isset$REQUEST'pdf' $pdf =...

TomatoCart 1.1 - (Authenticated) Local File Inclusion

Exploit Title: TomatoCart 1.1 PostAuth Local File Include Google Dork: "Powered by TomatoCart" Date: 25.10.2010 Author: brainpillow Software Link: http://www.tomatocart.com/ Version: 1.1 ========================================================= Vuln. code: if $osCCustomer-isLoggedOn === true if...

TomatoCart 1.1 Local File Inclusion

Exploit Title: TomatoCart 1.1 PostAuth Local File Include Google Dork: "Powered by TomatoCart" Date: 25.10.2010 Author: brainpillow Software Link: http://www.tomatocart.com/ Version: 1.1 ========================================================= Vuln. code: if $osCCustomer-isLoggedOn === true if...

TomatoCart 1.1 - (Authenticated) Local File Inclusion

TomatoCart 1.1 - Authenticated Local File Inclusion Exploit Title: TomatoCart 1.1 PostAuth Local File Include Google Dork: "Powered by TomatoCart" Date: 25.10.2010 Author: brainpillow Software Link: http://www.tomatocart.com/ Version: 1.1 =========================================================...

TomatoCart 1.1 Post Auth Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: TomatoCart 1.1 PostAuth Local File Include Google Dork: "Powered by TomatoCart" Date: 25.10.2010 Author: brainpillow Software Link: http://www.tomatocart.com/ Version: 1.1 ========================================================...

TomatoCart 1.0.1 (json.php) Remote Cross-Site Scripting Vulnerability

Summary TomatoCart is the new generation of open source shopping cart solution developed by Elootec Technology Co., Ltd. It is branched from osCommerce 3 as a separate project. Description TomatoCart version 1.0.1 suffers from a XSS vulnerability because input passed via the "action" parameter to...

TomatoCart 1.0.1 Cross Site Request Forgery

Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download: http://www.tomatocart.com/component/extensionmanage/?task=downloadfiles&file=tomatocart-1.0.1.zip --- -= CSRF PoC 1 - Create Admin User =- TomatoCart 1.0.1 Multiple CSRF Vulnerabilities - Create Admin User -= CSRF...

TomatoCart 1.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities

TomatoCart 1.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download: http://www.tomatocart.com/component/extensionmanage/?task=downloadfiles&file=tomatocart-1.0.1.zip --- -= CSRF PoC 1 - Create Admin User =-...

TomatoCart 1.0.1 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ============================================== TomatoCart 1.0.1 Multiple CSRF Vulnerabilities ============================================== Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download:...

TomatoCart 1.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download: http://www.tomatocart.com/component/extensionmanage/?task=downloadfiles&file=tomatocart-1.0.1.zip --- -= CSRF PoC 1 - Create Admin User =- TomatoCart 1.0.1 Multiple CSRF Vulnerabilities - Create Admin User -= CSRF...

Tomato Cart 1.0 Cross Site Request Forgery

img...

TomatoCart Backup Disclosure

======================================================================================== | Title : TomatoCart Backup Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID : | | CVE-ID : | |...

TomatoCart - Backup

TomatoCart - Backup ======================================================================================== | Title : TomatoCart Backup Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID :...

TomatoCart - Backup

======================================================================================== | Title : TomatoCart Backup Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID : 10683 | | CVE-ID : | ...

TomatoCart Backup Vulnerability

No description provided by source. ======================================================================================== | Title : TomatoCart Backup Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860...

TomatoCart Backup Vulnerability

Exploit for unknown platform in category web applications =============================== TomatoCart Backup Vulnerability =============================== ======================================================================================== | Title : TomatoCart Backup Vulnerability | | Author :...