Conkurent PHPMyCart 1.3 Cross Site Scripting and Authentication Bypass Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/37553/info Conkurent PHPMyCart is prone to a cross-site scripting vulnerability and an authentication-bypass vulnerability. An attacker may leverage these issues to gain unauthorized access to the affected application and...

Sql injection

SQL injection vulnerability in shop.php in Conkurent PHPMyCart allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-2904

SQL injection vulnerability in shop.php in Conkurent PHPMyCart allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-2904

CVE-2008-2904 describes an SQL injection in Conkurent PHPMyCart’s shop.php, exploitable via the cat parameter to allow remote execution of arbitrary SQL. Documents identify the affected software as PHPMyCart (Conkurent) and list a CVSS v2 base score of 7.5 (HIGH) with network access, low attack c...

CVE-2008-2904

SQL injection vulnerability in shop.php in Conkurent PHPMyCart allows remote attackers to execute arbitrary SQL commands via the cat parameter...