PT-2012-6188

Name of the Vulnerable Software and Affected Versions TomatoCart version 1.2.0 Alpha 2 and possibly earlier Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the json.php file. This is achieved by using a .. dot dot in the module...

TomatoCart 1.0.1 (json.php) Remote Cross-Site Scripting Vulnerability

Summary TomatoCart is the new generation of open source shopping cart solution developed by Elootec Technology Co., Ltd. It is branched from osCommerce 3 as a separate project. Description TomatoCart version 1.0.1 suffers from a XSS vulnerability because input passed via the "action" parameter to...

CVE-2010-3428: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action...