CactuShop XSS and SQL injection flaws

The remote host runs CactuShop, an e-commerce web application written in ASP. The remote version of this software is vulnerable to cross-site scripting due to a lack of sanitization of user-supplied data in the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be...

просмотр файлов в JShop Server 1.3.0

Здравствуйте, 3APA3A. вот нашел новый баг: Software: JShop Server 1.3.0 Vendor: JShop E-Commerce http://www.jshop.co.uk/ Vulnerability: возможность чтения файлов Risk: низкий Date: 30.09.2005 discovered by durito -duritoatmaildotru- HTTP: www.lwb57.org www.carder-world.ru IRC: irc.lwb57.org:6667...

mall23.txt

ORIGINAL LINK: http://systemsecure.org/ssforum/viewtopic.php?t=277 ------------------------------------- Ref: SS21092005 SYSTEMSECURE.ORG - Advisory/Exploit PUBLIC ADVISORY ------------------------------------- » Software: Mall23 » Link: http://www.mall23.com/ » Attacks: SQL Injection » Discovere...

CVE-2004-2123

The CVE-2004-2123 entry describes multiple cross-site scripting (XSS) vulnerabilities in Nextplace.com E-Commerce ASP Engine. The issues allow remote attackers to inject arbitrary script/HTML via (1) the level parameter of productdetail.asp, (2) the searchKey parameter of searchresults.asp, and p...

CVE-2004-2123

Multiple cross-site scripting XSS vulnerabilities in Nextplace.com E-Commerce ASP Engine allow remote attackers to inject arbitrary web script or HTML via the 1 level parameter of productdetail.asp, 2 searchKey parameter of searchresults.asp, and possibly 3 level parameter of ListCategories.asp...

CVE-2004-2084

JShop E-Commerce Server is affected by CVE-2004-2084 due to an XSS in search.php. The root cause is unsanitized input from the xSearch parameter, allowing remote attackers to inject arbitrary script/HTML via a crafted search URL (e.g., search.php?xSearch=...). Exploitation details are discussed i...

I-Mall Commerce - 'i-mall.cgi' Remote Command Execution

I-Mall explo Spawn bash style Shell with webserver uid Greetz z, spax, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $shiz; my @results; my $probe; my @U; $U1 = "/i-mall/i-mall.cgi?p=|"; sub intro sleep 1; ; sub...

Eurofull E-Commerce - Mensresp.asp Cross-Site Scripting

Eurofull E-Commerce - Mensresp.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/12420/info Reportedly Eurofull E-Commerce is affected by a cross-site scripting vulnerability in the 'mensresp.asp' script. This issue is due to a failure of the application to properly sanitize...

Eurofull E-Commerce - 'Mensresp.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12420/info Reportedly Eurofull E-Commerce is affected by a cross-site scripting vulnerability in the 'mensresp.asp' script. This issue is due to a failure of the application to properly sanitize user-supplied input. As a result of this vulnerability, it i...

JShop E-Commerce Suite 1.2 Product.PHP Cross-Site Scripting Vulnerability

JShop E-Commerce Suite 1.2 Product.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/12403/info JShop E-Commerce Suite is affected by a cross-site scripting vulnerability in the 'product.php' script. As a result of this vulnerability...

CVE-2004-2123

Multiple cross-site scripting XSS vulnerabilities in Nextplace.com E-Commerce ASP Engine allow remote attackers to inject arbitrary web script or HTML via the 1 level parameter of productdetail.asp, 2 searchKey parameter of searchresults.asp, and possibly 3 level parameter of ListCategories.asp...

Multiple vulnerabilities 1n BBS E-Market Professional

ECHOADV06$2004 --------------------------------------------------------------------------- Multiple vulnerabilities 1n BBS E-Market Professional --------------------------------------------------------------------------- Author: y3dips Date: Sept, 7th 2004 Location: Indonesian, Jakarta Web:...

JShop Input Validation Hole in 'page.php' Permits Cross-Site Scripting Attacks

Indonesia Security Development Team Indohack http://indohack.sourceforge.net/drponidi =========================================================================== Security Advisory Advisory Name: JShop Input Validation Hole in 'page.php' Permits Cross-Site Scripting Attacks Platform: Linux Any, UN...

JShop E-Commerce Suite 3.0 - Page.PHP Cross-Site Scripting Vulnerability

JShop E-Commerce Suite v3 Page.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/11003/info Reportedly the JShop E-Commerce Suite is affected by a cross-site scripting vulnerability in the 'page.php' script. This issue is due to a...

[NT] Cart32 Cross-Site Scripting

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CactuSoft CactuShop v5.x shopping cart software multiple security vulnerabilities

S-Quadra Advisory 2004-03-31 Topic: CactuSoft CactuShop v5.x shopping cart software multiple security vulnerabilities Severity: High Vendor URL: http://www.cactushop.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040331.txt Release date: 31 Mar 2004 1. DESCRIPTION CactuShop is an ASP...

Adv-20040331.txt

S-Quadra Advisory 2004-03-31 Topic: CactuSoft CactuShop v5.x shopping cart software multiple security vulnerabilities Severity: High Vendor URL: http://www.cactushop.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040331.txt Release date: 31 Mar 2004 1. DESCRIPTION CactuShop is an ASP...

ZH2004-07SA (security advisory): Multiple Sql injection vulnerabilities in Online Store Kit 3.0 Products (Lite - Standard and Pro)

ZH2004-07SA security advisory: Multiple Sql injection vulnerabilities in Online Store Kit 3.0 Products Lite - Standard and Pro Published: 17 february 2004 Released: 17 february 2004 Name: Online Store Kit Products Lite - Standard - Pro Affected Systems: 3.0 Issue: Sql Injection Vulnerability...

Adv-20040218.txt

S-Quadra Advisory 2004-02-18 Topic: WebCortex Webstores2000 version 6.0 multiple security vulnerabilities Severity: High Vendor URL: http://www.webcortex.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040218.txt Release date: 18 Feb 2004 1. DESCRIPTION Webstores2000 is a complete...

Adv-20040216.txt

S-Quadra Advisory 2004-02-16 Topic: EarlyImpact ProductCart shopping cart software multiple security vulnerabilities Severity: High Vendor URL: http://www.earlyimpact.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040216.txt Release date: 16 Feb 2004 1. DESCRIPTION ProductCart is a...