EUVD-2008-6439

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2008-6469

SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2008-6469

PlainCart 1.1.2 is affected by a SQL injection in index.php, exploitable via the p parameter to allow remote execution of arbitrary SQL commands. The CVE-2008-6469 entry documents a HIGH-severity, network-accessible issue with no authentication required. The provided sources confirm the vulnerabi...

CVE-2008-6469

SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands via the p parameter...

Plaincart 'index.php' SQL注入漏洞

BUGTRAQ ID: 31275 CNCAN ID：CNCAN-2008092313 Plaincart是一款基于PHP的WEB应用程序。 Plaincart不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给'p'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 PlainCart 1.1.2 目前没有解决方案提供： http://www.phpwebcommerce.com/shopping-cart-source-code.php...

plaincart-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE-DON-Outlawz and all darkc0de members...

Plaincart 1.1.2 (p) Remote SQL Injection Vulnerability

No description provided by source. . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ \ / / // \ / \ |/| || \\ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu...

Plaincart 1.1.2 (p) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== Plaincart 1.1.2 p Remote SQL Injection Vulnerability ====================================================== Title: PlainCart index.php SQL Inj Script Download:...

Plaincart 1.1.2 - p SQL Injection

Plaincart 1.1.2 - p SQL Injection . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE...

Plaincart 1.1.2 - 'p' SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE-DON-Outlawz and all darkc0de members...