1439 matches found
Adobe Flash Player/Flash CS/AIR/Flex Detection (Windows SMB Login)
SMB login-based detection of Adobe Flash Player/Flash CS/AIR/Flex. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CS-Cart 'core/user.php' SQL注入漏洞
BUGTRAQ ID: 30979 CNCAN ID：CNCAN-2008090301 CS-Cart是一款基于PHP的WEB应用程序。 CS-Cart不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'core/user.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 CS-Cart 1.3.5 可联系供应商获得补丁信息： http://www.cs-cart.com/...
CS-Cart <= 1.3.5 SQL Injection
GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build, run and promote an online store. The...
CS-Cart <= 1.3.5 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build, r...
cscart-sql.txt
GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build, run and promote an online store. The...
CS-Cart <= 1.3.5 (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== CS-Cart = 1.3.5 Auth Bypass SQL Injection Vulnerability ========================================================== GulfTech Security Research September 02, 2008 Vendor : CS-Cart.co...
CS-Cart 1.3.5 - Authentication Bypass
CS-Cart 1.3.5 - Authentication Bypass GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build...
CS-Cart 1.3.5 - Authentication Bypass
GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build, run and promote an online store. The...
Unfixed XSS vulnerability at cs-source.tk
Security researcher xylitol, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting cs-source.tk, which at the time of submission ranked 11287113 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is currentl...
kernel: ptrace: Unprivileged crash on x86_64 %cs corruption
Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service crash via certain ptrace calls...
CVE-2008-1615
Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service crash via certain ptrace calls...
kernel: ptrace: Unprivileged crash on x86_64 %cs corruption
Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service crash via certain ptrace calls...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected...
CVE-2008-1458
Cross-site scripting XSS vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected...
CVE-2008-1458
Cross-site scripting XSS vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected...
CVE-2008-1458
CVE-2008-1458 affects CS-Cart 1.3.2 (also reported in 1.3.5-SP2 trial edition). The vulnerability is a cross-site scripting (XSS) flaw in index.php, exploitable via the q parameter in a products search action, allowing remote attackers to inject arbitrary HTML/JavaScript. No remediation details a...
CVE-2008-1458: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected...
cscart-xss.txt
CS-Cart XSS Discovered by sasquatch of SecureState - www.securestate.com Version: 1.3.2 obtained from /cscart/install.php GET...
CS-Cart 1.3.2 - index.php Cross-Site Scripting
CS-Cart 1.3.2 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/28333/info CS-Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...