Cross site scripting

A vulnerability has been found in SourceCodester Simple and Nice Shopping Cart Script and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /mkshope/login.php. The manipulation of the argument msg leads to cross site scripting. The attack can be...

Simple and Nice Shopping Cart Script 跨站脚本漏洞

Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. A cross-site scripting vulnerability exists in Simple and Nice Shopping Cart Script, which stems from an unknown function in its /mkshope/login.php component that manipulates the parameter msg to cause cross-site...

Bonza Digital Cart Script 1 Cross Site Scripting

============================================================================================================================ | Title : Bonza Digital Cart Script version 1 XSS Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais V.Pro | |...

Shopping Cart Script with Affiliate Program SQL Injection

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Shopping Cart Script with Affiliate Program SQL Injection Vendor url:http://www.yourfreeworld.com Version:n/a Price:399$ Published: 2010-06-19 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue,...

CVE-2014-1618

Multiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to execute arbitrary SQL commands via the 1 catid or 2 pid parameter to products.php or id parameter to 3 page.php or 4 news.php...

Shopping Cart Script SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ Shopping Cart Script SQL Injection Vulnerability ================================================ + Title: Shopping Cart Script SQL Injection Vulnerability + Date: 8.6.2010 + Author: ThEtA.Nu +...

CVE-2008-6500

CVE-2008-6500 describes a cross-site scripting (XSS) vulnerability in the CodeToad ASP Shopping Cart Script. The issue allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI. The primary affected component is the shopping cart script’s handling of q...

CVE-2008-4886

CVE-2008-4886 is a SQL injection vulnerability in the YourFreeWorld Shopping Cart Script, specifically in index.php via the c parameter. The root cause is unsanitized input leading to arbitrary SQL execution. The vulnerability affects the script and has a high base severity (CVSS v2: AV:N/AC:L/Au...

ephpshopping-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE-DON-Outlawz and all darkc0de members...

CVE-2007-4121

CVE-2007-4121 relates to multiple SQL injection flaws in admin.aspx across three scripts: E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script. The vulnerability allows remote attackers to inject SQL via the EmailAdd (Username) and Pass (password) parameters, po...

E-commerceScripts ALL Apps (Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script) admin.aspx SQL

A R I A - S E C U R I T Y Vendor: http://www.e-commercescripts.com/dotnet/ E-commerceScripts ALL Apps Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script admin.aspx SQL Injection Username: anything' OR 'x'='x password: whatever you want or anything' OR 'x'='x Credits: Aria-Securit...

CubeCart 2.0.x - 'view_cart.php?add' Full Path Disclosure

source: https://www.securityfocus.com/bid/13050/info CubeCart is reported prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These issues affect the 'index.php',...