8620 matches found
DST2K0035: Credit card (customer) details exposed within CyberOff ice Shopping Cart v2
All, We have not released this for the past week at the vendors request. This was to enable them to notify all registered users about this vulnerability and to provide a work around. We have taken the unusual step of including the vendors response to our original advisory release in full. This wa...
DST2K0035.txt
============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 22/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...
SmartWin CyberOffice Shopping Cart 2.0 - Client Information Disclosure
SmartWin CyberOffice Shopping Cart 2.0 - Client Information Disclosure source: https://www.securityfocus.com/bid/1734/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. It is possible for a remote user ...
SmartWin CyberOffice Shopping Cart 2.0 - Client Information Disclosure
source: https://www.securityfocus.com/bid/1734/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. It is possible for a remote user to gain read access to the private directory on a website running...
Extent RBS directory Transversal.
Advisory Title: Extent RBS directory Transversal. Release Date: 09/21/2000 Application: Extent RBS Platform: Windows NT4 Windows 2000 RedHat Linux 6.x Sun Solaris 2.6+ Version: 2.63. Possibly older versions as well. have also tested 2.5 and found it vulnerable Severity: Any user can get any file ...
Cart32 Backdoor Password Arbitrary Command Execution
The Cart32 e-commerce shopping cart is installed. This software contains multiple security flaws. There is a backdoor password of 'wemilo' in cart32.exe. This backdoor allows a remote attacker to run arbitrary commands in the context of the web server, and access credit card information...
Alert: Cart32 secret password backdoor (CISADV000427)
Cerberus Information Security Advisory CISADV000427 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 27th April 2000 Name : Cart32 secret password backdoor Affected Systems : Any Win32 based web server using Cart32 versions 3.0 most uptodate and 2.6 are affected. Issue : Attackers ca...
09-16-99-ihtml.txt
Team Asylum Security Copyright c 1999 By CyberSpace 2000 http://www.team-asylum.com Source: Dave M. [email protected] Advisory Date: 09/16/1999 Affected -------- All known released versions of the iHTML Merchant for Unix/Windows 95/98/NT. Product Description ------------------- iHTML...
Webcart Default Install Configuration Disclosure
At least one of these file or directories is world readable : /webcart/orders/ /webcart/orders/import.txt /webcart/carts/ /webcart/config/ /webcart/config/clients.txt /webcart-lite/orders/import.txt /webcart-lite/config/clients.txt This misconfiguration may allow an attacker to gather the credit...
perlshop.cc.txt
Date: Tue, 27 Apr 1999 14:39:47 +0200 From: Bo Elkjaer To: [email protected] Subject: Re: Shopping Carts exposing CC data Been doing some more searches for misconfigured webcarts exposing cc-information. Seems like a pandora's box, that just opened. Perlshop is vulnerable too if misconfigured:...
shopping.cart.cc.data.txt
Date: Mon, 19 Apr 1999 20:05:18 -0700 From: Joe To: [email protected] Subject: Shopping Carts exposing CC data Tomorrow April 20 1999 CNet's news.com should be running a story regarding various commercial and freeware shopping carts that, when installed incorrectly or when installed by amateur...
cybercash.cc.txt
Date: Sun, 25 Apr 1999 13:38:43 +0200 From: Bo Elkjaer To: [email protected] Subject: Re: Shopping Carts exposing CC data Hi Joe Your CC-exposures are gaining momentum. Right now I'm only waiting for the mainstream papers to catch up. I'm a journalist myself, working for one of Denmarks larges...
h-thief.txt
security vulnerability in hustler.com which allows any user to steal another users account and gain access to full access to their account including cc information no fix yet. hustler.com has been informed. ---------------------------------------------------------------------------- exploit...
domino3.txt
L0pht Security Advisory ------------- URL Origin: http://www.l0pht.com/advisories.html Release Date: October 9th, 1998 Application: Lotus Domino Severity: Web users can retrieve sensitive data in many Domino based Internet applications Author: [email protected] Operating Sys: All platforms...
msie.5.previous.inputs.txt
Date: Wed, 24 Mar 1999 16:04:00 -0500 From: Anthony Pijerov To: [email protected] Subject: IE5 Feature/security hole In Internet Explorer 5, there is a feature, that remembers what you type into web page forms, so that if you ever come to enter that field again, it will drop down a box of your...
3com-HiPer-arc.txt
Date: Fri, 25 Dec 1998 16:01:36 +0100 From: Olaf Selke Reply-To: Bugtraq List To: [email protected] Subject: 3Com HiPer ARC vulnerable to nestea attack We found 3Com's HiPer ARCs running system version 4.1.11 being vulnerable to the nestea DoS attack. The cards simply crash and reboot. The mul...
Wudfhost.exe crashes when you plug in a USB-ICCD-compliant smart card device into a Windows computer
None None...
Update Rollup 4 for System Center 2019 Virtual Machine Manager
None None...