66 matches found
CVE-2006-5953: Undefined Security Weakness
SQL injection vulnerability in viewcart.asp in Evolve shopping cart aka Evolve Merchant allows remote attackers to execute arbitrary SQL commands via the zoneid parameter...
CVE-2006-5953
The CVE-2006-5953 issue is an SQL injection in Evolve shopping cart's viewcart.asp, exploitable through the zoneid parameter to execute arbitrary SQL commands. Documented in multiple sources (NVD, CVE lists, PT-2006-6618) confirms the vulnerability and its remote nature but provides no concrete d...
Evolve Merchant[ injection sql ]
vendor site:http://www.lynxinternet.com/ product:Evolve Merchant bug:injection sql risk:medium injection sql get : http://site.com/viewcart.asp?zoneid='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...
evolveSQL.txt
vendor site:http://www.lynxinternet.com/ product:Evolve Merchant bug:injection sql risk:medium injection sql get : http://site.com/viewcart.asp?zoneid='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...
Evolve Merchant - viewcart.asp SQL Injection
Evolve Merchant - viewcart.asp SQL Injection source: https://www.securityfocus.com/bid/21070/info Evolve Merchant is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...
Evolve Merchant - 'viewcart.asp' SQL Injection
source: https://www.securityfocus.com/bid/21070/info Evolve Merchant is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acces...