eHub SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

SnapProof Cross Site Scripting

Exploit Title: SnapProof cart.php Cross Site Scripting Google Dork: inurl:"Created and powered by SnapProof" home : www.D99Y.com Date: 1/3/2011 Author: Difficult 511 Software Link: http://www.snapproof.com/ file : cart.php exploit : http://localhost/cart.php?retPageID= XSS...

SnapProof (cart.php) Cross Site Scripting

Exploit Title: SnapProof cart.php Cross Site Scripting Google Dork: inurl:"Created and powered by SnapProof" home : www.D99Y.com Date: 1/3/2011 Author: Difficult 511 Software Link: http://www.snapproof.com/ file : cart.php exploit : http://localhost/cart.php?retPageID= XSS...

Prestashop Cartium 1.3.3 - 0.246s SQL Injection

Vulnerable software and vendor: Prestashop, verion: 1.3.3 - 0.246s Sql Injection Vulnerabilities Vulnerable File Vulnerable Field category.php idcategory cart.php idproduct product.php idproduct Vulnerability details: just inject ' and you get sql eror...

PT-2011-2409

Name of the Vulnerable Software and Affected Versions Advanced Webhost Billing System AWBS versions 2.9.2 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the oid parameter in an "add other" action in the cart.php file...

CVE-2011-0510: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cart.php in Advanced Webhost Billing System AWBS 2.9.2 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the oid parameter in an addother action...

PT-2010-5597

Name of the Vulnerable Software and Affected Versions digiSHOP version 2.0.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "cart.php" file. Recommendations For digiSHOP version 2.0.2, consider restricting access to th...

CVE-2010-4633: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1...

digiSHOP SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================== digiSHOP SQL Injection Vulnerability ==================================== ^Date : 23/7/2010 ^Vendor Site : http://digishop.digisoft77.com/ ^MOD Version : digiSHOP 2.0.2 ^Author : Silic0n...

Qualiteam X-Cart 'cart.php' SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Qualiteam X-Cart 'cart.php' SQL Injection Vulnerability ======================================================= Vulnerable: Qualiteam X-Cart 4.0.17 Qualiteam X-Cart 4.0.13 Qualiteam...

Unfixed XSS vulnerability at www.spaagio.com

Security researcher Uber0n, has submitted on 15/04/2008 a cross-site-scripting XSS vulnerability affecting www.spaagio.com, which at the time of submission ranked 3697965 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/04/2008. It is current...

CVE-2007-4439

PHP remote file inclusion vulnerability in popupwindow.php in Squirrelcart 1.x.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the siteisproot parameter, probably related to cart.php...

Squirrelcart <= 1.x.x (cart.php) Remote File Inclusion Vulnerability

No description provided by source. Title : Squirrelcart = 1.x.x Remote File Inclusion URL : http://squirrelcart.com/ Google Dork : inurl:"/squirrelcart/" -squirrelcart.com Author : ShaiMagal Vulnerable file : popupwindow.php - config.php, line 13 - $siteisproot = "blablabla"; Exploit :...

CVE-2007-2550: Undefined Security Weakness

Multiple CRLF injection vulnerabilities in Devellion CubeCart 3.0.15 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a cookie name beginning with "ccSID" to 1 cart.php or 2 index.php...

CVE-2007-2331: Undefined Security Weakness

PHP remote file inclusion vulnerability in cart.php in Shop-Script 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the langlist parameter...

CVE-2007-0134

Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in 1 cart.php and 2 page.php. NOTE: a later report and CVE analysis indicate that the vulnerability is present in 1...

CVE-2007-0134: Improper Control of Generation of Code

Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in 1 cart.php and 2 page.php. NOTE: a later report and CVE analysis indicate that the vulnerability is present in 1...

CVE-2006-5727: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote attackers to execute arbitrary PHP code via the 1 sazsettingsshippingfolder and 2 sazsettingstaxfolder parameters...

SazCart 1.5 - cart.php Remote File Inclusion

SazCart 1.5 - cart.php Remote File Inclusion sazcart v1.5 cart.php Remote File include ---Hitamputih crew--- Bug Found By : IbnuSina vendor : http://sazcart.com/site Risk : High Greetz : Solpot,permenhack,barbarosa,cah|gemblunkz,fungmen,setiawan,irvian,meteoroid and all member hitamputih crew...

[ECHO_ADV_55$2006]Phpmybibli <=2.1 Multiple Remote File Inclusion Vulnerability

ECHOADV55$2006 ------------------------------------------------------------------------ ----------------------- ECHOADV55$2006Phpmybibli =2.1 Multiple Remote File Inclusion Vulnerability ------------------------------------------------------------------------ ----------------------- Author : Dedi...