EUVD-2012-5253

Malware in sbrugna...

EUVD-2012-5254

Malware in sbrugna...

asaanCart XSS/LFI Vulnerabilities

No description provided by source...

asaanCart <= 0.9 Multiple Vulnerabilities - Active Check

asaanCart is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Directory traversal

Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. dot dot in the page parameter to index.php...

CVE-2012-5330

As provided, CVE-2012-5330 is an XSS vulnerability in asaanCart 0.9 affecting multiple entry points: the PATH_INFO parameters to calc.php, chat.php, register.php, or index.php in libs/smarty_ajax/, and the page parameter to libs/smarty_ajax/index.php. The description does not specify affected ver...

CVE-2012-5330

Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...

CVE-2012-5331

CVE-2012-5331 describes a directory traversal in asaanCart 0.9, allowing remote attackers to include arbitrary local files via a .. in the page parameter to index.php. The NVD entry notes a CVSS v2 base score of 6.8 (MEDIUM) with network attack vector and partial impacts on confidentiality, integ...

CVE-2012-5330: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...

CVE-2012-5331: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. dot dot in the page parameter to index.php...

PT-2012-5930

Name of the Vulnerable Software and Affected Versions asaanCart version 0.9 Description A directory traversal issue allows remote attackers to include arbitrary local files by using a .. dot dot in the page parameter to "index.php". Recommendations For asaanCart version 0.9, consider restricting...

PT-2012-5929

Name of the Vulnerable Software and Affected Versions asaanCart version 0.9 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various means, including the PATH INFO to specifi...

AsaanCart 0.9 Cross Site Scripting

HTTPCS Advisory : HTTPCS97 Product : AsaanCart Version : 0.9 Date : 2012-09-13 Criticality level : Less Critical Description : A vulnerability has been discovered in AsaanCart, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via the 'categoryname'...

asaanCart - Cross-Site Scripting Local File Inclusion

asaanCart - Cross-Site Scripting Local File Inclusion Exploit Title :asaanCart XSS/LFI Vulnerabilities Google Dork :intext:"smartyajax — AJAX-enabled Smarty plugins"Orinurl:"/smartyajax/" Date :14/03/2012 Author :Number 7 Twitter:@TunisianSeven Blog :http://tunisianseven.blogspot.com/ Tested on...

AsaanCart Cross Site Scripting / Local File Inclusion

Exploit Title :asaanCart XSS/LFI Vulnerabilities Google Dork :intext:"smartyajax — AJAX-enabled Smarty plugins"Orinurl:"/smartyajax/" Date :14/03/2012 Author :Number 7 Twitter:@TunisianSeven Blog :http://tunisianseven.blogspot.com/ Tested on :Linux Software Link :http://asaancart.wordpress.com/...

asaanCart XSS/LFI Vulnerabilities

Exploit for php platform in category web applications Exploit Title :asaanCart Multiple Vulnerabilities Google Dork :intext:"smartyajax — AJAX-enabled Smarty plugins"Orinurl:"/smartyajax/" Date :14/03/2012 Author :Number 7 Twitter:@TunisianSeven Blog :http://tunisianseven.blogspot.com/ Tested on...

asaanCart - Cross-Site Scripting / Local File Inclusion

Exploit Title :asaanCart XSS/LFI Vulnerabilities Google Dork :intext:"smartyajax — AJAX-enabled Smarty plugins"Orinurl:"/smartyajax/" Date :14/03/2012 Author :Number 7 Twitter:@TunisianSeven Blog :http://tunisianseven.blogspot.com/ Tested on :Linux Software Link :http://asaancart.wordpress.com/...