5014 matches found
Comersus Open Technologies Comersus 5.0 - comersus_message.asp Cross-Site Scripting
Comersus Open Technologies Comersus 5.0 - comersusmessage.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/10674/info Comersus Cart is reported prone to multiple vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks and manipulate...
Comersus Open Technologies Comersus 5.0 - 'comersus_message.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/10674/info Comersus Cart is reported prone to multiple vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks and manipulate parameters to change the price of an order. Comersus Cart version 5.09 is affected by...
vpasp5x.txt
VP-ASP Shopping Cart Multiple Vulnerabilities Release Date: June 14, 2004 Severity: High Vendor: Virtual Programming Software: VP-ASP Shopping Cart Version 5.x Remote: Remotely executable Vulnerabilities: Cross Site Scripting SQL Injection Technical Details: Cross Site Scripting Vulnerability was...
[Full-Disclosure] VP-ASP Shopping Cart Multiple Vulnerabilities
VP-ASP Shopping Cart Multiple Vulnerabilities Release Date: June 14, 2004 Severity: High Vendor: Virtual Programming Software: VP-ASP Shopping Cart Version 5.x Remote: Remotely executable Vulnerabilities: Cross Site Scripting SQL Injection Technical Details: Cross Site Scripting Vulnerability was...
Zen Cart login.php SQL Injection Vulnerability
Overview: "Zen Cart™ truly is the art of e-commerce; a free, user-friendly, open source shopping cart system." Description: An input validation vulnerability has been reported in Zen Cart, allowing a remote user to inject SQL commands. The '/admin/login.php' file does not properly validate...
A-CART Pro & A-CART 2.0 Input Validation Holes
Title: A-CART Pro & A-CART 2.0 Input Validation Holes Software: A-CART Pro & A-CART 2.0 Vendor: http://www.alanward.net Underlying OS: Windows. Description: A-CART is an ASP shopping cart application written in VBScript. The system allows a customer to browse through an inventory of products and...
CVE-2004-1874
Multiple cross-site scripting XSS vulnerabilities in 1 deliver.asp and 2 billing.asp in A-CART Pro and A-CART 2.0 allow remote attackers to inject arbitrary web script or HTML via the user information forms...
acartSQL.txt
Title: A-CART Pro & A-CART 2.0 Input Validation Holes Software: A-CART Pro & A-CART 2.0 Vendor: http://www.alanward.net Underlying OS: Windows. Description: A-CART is an ASP shopping cart application written in VBScript. The system allows a customer to browse through an inventory of products and...
CVE-2004-0240
CVE-2004-0240 describes a directory traversal vulnerability in X-Cart 3.4.3 where remote attackers can view arbitrary files by supplying a ".." sequence in the shop_closed_file parameter to auth.php . The root cause is insufficient input validation on the parameter leading to path traversal. The ...
CVE-2004-0240
Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. dot dot in the shopclosedfile argument to auth.php...
CVE-2004-0350
The CVE-2004-0350 entry affects the SpiderSales shopping cart, which does not enforce a minimum length for the private key. This weakens key material quality and can let local users obtain the private key by factoring, with an in‑the‑wild risk limited by local access and a low base score (2.1). T...
CVE-2004-0242
X-Cart 3.4.3 is affected by CVE-2004-0242. An attacker can remotely read sensitive information by supplying a mode parameter that triggers phpinfo or perlinfo commands. The vulnerability enables information disclosure in the affected product via the web interface; no exploitation or mitigations a...
CVE-2004-0241
X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perlbinary argument in 1 upgrade.php or 2 general.php...
CVE-2004-0348
CVE-2004-0348 pertains to SpiderSales Shopping Cart software, affecting the viewCart.asp component. The root cause is an SQL injection via the userId parameter, enabling a remote attacker to execute arbitrary SQL statements with full impact on confidentiality, integrity, and availability (CVSS v2...
CVE-2004-0351
The CVE-2004-0351 issue concerns Spider Sales shopping cart, where the private key is stored in the same database/table as the public key. This design enables local users with database access to decrypt data, affecting confidentiality (partial). The available sources describe the vulnerable behav...
CVE-2004-0241
CVE-2004-0241 affects X-Cart 3.4.3 (Qualiteam X-Cart). The vulnerability allows remote attackers to execute arbitrary commands by supplying output in the perl_binary parameter in either upgrade.php or general.php. The underlying cause is improper handling of the perl_binary argument, leading to a...
CVE-2004-0242
X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with 1 phpinfo command or 2 perlinfo command...
CVE-2004-0350
SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring...
SpiderSales Shopping Cart SQL injection
The remote host is running the SpiderSales Shopping Cart CGI suite. There is a bug in this suite which may allow an attacker to force it to execute arbitrary SQL statements on the remote host. An attacker may use this flaw to gain the control of the remote website and possibly execute arbitrary...
Spider Sales shopping cart software multiple security vulnerabilities
S-Quadra Advisory 2004-03-03 Topic: Spider Sales shopping cart software multiple security vulnerabilities Severity: High Vendor URL: http://www.spidersales.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040303.txt Release date: 03 Mar 2004 1. DESCRIPTION "Spider Sales is a powerful...