Hassan Consulting Shopping Cart 1.23 - Arbitrary Command Execution

Hassan Consulting Shopping Cart 1.23 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/3308/info Hassan Consulting's Shopping Cart is commercial web store software. Shopping Cart does not filter certain types of user-supplied input from web requests. This makes it possible f...

Hassan Consulting Shopping Cart 1.23 - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/3308/info Hassan Consulting's Shopping Cart is commercial web store software. Shopping Cart does not filter certain types of user-supplied input from web requests. This makes it possible for a malicious user to submit a request which causes arbitrary...

CVE-2000-0921

CVE-2000-0921 describes a directory traversal in Hassan Consulting’s shop.cgi shopping cart, allowing remote attackers to read arbitrary files by using a .. payload in the page parameter. The issue is due to improper handling of relative paths, enabling access to sensitive files and potentially e...

CVE-2000-0921

Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. dot dot attack on the page parameter...

Cyberguard FW Silliness

Hey guys, Not an extremely huge issue, however one I think worth noting. Cyberguard claims that their FW software runs atop 'hardened' versions of SCO/Unixware comes bundled w/ the FW package. However, on a default installation of the latest version of the Cyberguard FW on SCO, there are a number...

Security Advisory: Hassan Consulting's shop.cgi Directory Traversal Vulnerability.

October 7, 2000 Security Advisory shop.cgi.ad-1.00-10 : Hassan Consulting's Shopping Cart shop.cgi Directory Traversal Vulnerability Affected Product: Hassan Consulting's Shopping Cart shop.cgi/shop.pl Version 1.18 possibly others aswell Affected Platforms: Unix Windows Overview: Hassan...

DST2K0040.txt

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 26/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

Hassan Consulting Shopping Cart 1.18 - Directory Traversal

Hassan Consulting Shopping Cart 1.18 - Directory Traversal source: https://www.securityfocus.com/bid/1777/info The $page variable in Hassan Consulting Shopping Cart does not properly check for insecure relative paths such as the double dot "..". Therefore, requesting the following URL will displa...

Hassan Consulting Shopping Cart 1.18 - Directory Traversal

source: https://www.securityfocus.com/bid/1777/info The $page variable in Hassan Consulting Shopping Cart does not properly check for insecure relative paths such as the double dot "..". Therefore, requesting the following URL will display the specified file:...

DST2K0035: Credit card (customer) details exposed within CyberOff ice Shopping Cart v2

All, We have not released this for the past week at the vendors request. This was to enable them to notify all registered users about this vulnerability and to provide a work around. We have taken the unusual step of including the vendors response to our original advisory release in full. This wa...

DST2K0039: Webteachers Webdata: Importing files lower than web ro ot possible in to database

All, We have released the following advisory due to the fact that we have provided a patch Section II. If people require any help with implementing this patch please come back to us on the following e-mail address [email protected]. This patch may require a little tinkering with for you...

DST2K0036.txt

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 22/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0039.txt

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 26/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0042: Possible to read/execute any file with Talentsoft Web+ Application Server example scripts.

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 26/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0037.txt

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 25/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0037: QuotaAdvisor 4.1 by WQuinn is susceptible to alternati ve datastreams to bypass quotas.

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 25/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0031: DoS in BrowseGate(Home) v2.80(H)

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 18/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0019: Multiple BufferOverruns in WebBBS v1.17

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 30/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0018.txt

============================================================================ ==== Delphis Consulting Plc ============================================================================ ==== Security Team Advisories 19/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

DST2K0012.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 06/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...