CubeCart 3.0.6 Cross Site Request Forgery

Title : CubeCart tnt-r00t Homepage : www.p0c.cc document.p0c.submit; NICKNAME: P0C T34M...

CubeCart 3.0.6 - Cross-Site Request Forgery (Add Admin)

Title : CubeCart 3.0.4 tnt-r00t Homepage : www.p0c.cc document.p0c.submit; NICKNAME: P0C T34M...

NSAG-197-23.02.2006.txt

Advisory: NSAG-¹197-23.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: CubeCart 3.0.0 – 3.0.6 Site of manufacturer: http://www.cubecart.com The status: 19/11/2005 - Publication is postponed...

CubeCart <= 3.0.6 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================== CubeCart All rights reserved. 1. example email protected:/research$ perl ./cijfer-ccxpl.pl -h www.xxx.com -d email protected /$ id;uname -a uid=48apache gid=48apache...

CubeCart 3.0.6 - Remote Command Execution

!/usr/bin/perl cijfer-ccxpl - CubeCart All rights reserved. 1. example cijfer@kalma:/research$ perl ./cijfer-ccxpl.pl -h www.xxx.com -d [email protected] /$ id;uname -a uid=48apache gid=48apache groups=48apache,2523psaserv Linux server.xxx.com 2.6.10-1.771FC2 1 Mon Mar 28 00:50:14 EST 2005 i686...