CVE-2009-3309

CVE-2009-3309 describes an SQL injection in CF ShopKart 5.4 beta. The vulnerability is in index.cfm (CF ShopKart) and is exploitable via the itemid parameter in the ViewDetails action, enabling remote attackers to execute arbitrary SQL commands. This is a different vector than CVE-2008-6320. No r...

CVE-2009-3309

SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a ViewDetails action, a different vector than CVE-2008-6320...

CVE-2009-3309: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a ViewDetails action, a different vector than CVE-2008-6320...

CF Shopkart 5.3x (itemid) Remote SQL Injection Vulnerability

No description provided by source. CF ShopKart SQL vulnerability By learn3r hacker from Nepal [email protected] Product name: CF ShopKart Version: 5.4 beta or may be lower Product home: www.cfshopkart.com Affected variable: item SQLi examples:...

CF Shopkart 5.3 SQL Injection

CF ShopKart SQL vulnerability By learn3r hacker from Nepal [email protected] Product name: CF ShopKart Version: 5.4 beta or may be lower Product home: www.cfshopkart.com Affected variable: item SQLi examples:...

CF Shopkart 5.3x - itemID SQL Injection

CF Shopkart 5.3x - itemID SQL Injection CF ShopKart SQL vulnerability By learn3r hacker from Nepal [email protected] Product name: CF ShopKart Version: 5.4 beta or may be lower Product home: www.cfshopkart.com Affected variable: item SQLi examples:...

CF Shopkart 5.3x (itemid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ CF Shopkart 5.3x itemid Remote SQL Injection Vulnerability ============================================================ CF ShopKart SQL vulnerability By learn3r hacker from Nepal...

CF Shopkart 5.3x - 'itemID' SQL Injection

CF ShopKart SQL vulnerability By learn3r hacker from Nepal [email protected] Product name: CF ShopKart Version: 5.4 beta or may be lower Product home: www.cfshopkart.com Affected variable: item SQLi examples:...

Camfrog.com SQL Injection

Camfrog.com suffers from a remote SQL injection vulnerability Millions of accounts are exposed Vulnerable parameter: popular.php?orderby=&st=dir&r=&cg= Available database: informationschema, cf, cfgift, cfimage, cfonline Users password are in CLEAR TEXT !!! More on...

Improper access control

CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via a direct request...

CVE-2008-6321

CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via a direct request...

Sql injection

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands via the Category parameter in a ViewCategory action...

CVE-2008-6320

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands via the Category parameter in a ViewCategory action...

CVE-2008-6321

CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via a direct request...

CVE-2008-6320

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands via the Category parameter in a ViewCategory action...

CVE-2008-6321

CVE-2008-6321 affects CF Shopkart 5.2.2, where cfshopkart52.mdb is stored under the web root with insufficient access control, allowing remote attackers to obtain sensitive data (e.g., usernames and passwords) via a direct request. The entries confirm the vulnerable component and impact but do no...

CVE-2008-6320

CVE-2008-6320 : A SQL injection in CF Shopkart 5.2.2 (index.cfm) allows remote attackers to inject arbitrary SQL via the Category parameter in the ViewCategory action. The vulnerability is confirmed in the NVD entry for CF Shopkart 5.2.2 with a base score of 7.5 (HIGH) and network attack vector w...

CVE-2008-6321: Undefined Security Weakness

CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via a direct request...

CVE-2008-6320: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands via the Category parameter in a ViewCategory action...

CF SHOPKART 5.2.2 (SQL/DD) Multiple Remote Vulnerabilities

No description provided by source. -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : CF SHOPKART V5.2.2 download : http://www.cfshopkart.com/dl/cfshopkart522.rar Demo :...