EUVD-2008-2221

Malware in sbrugna...

CVE-2008-2411

SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a details action...

CVE-2008-2224

Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 sazsettingssitedir parameter to layouts/default/header.saz.php and the 2 sazsettingssiteurl parameter to...

CVE-2008-2224

CVE-2008-2224 affects SazCart 1.5.1. The vulnerability arises when PHP register_globals is enabled, enabling remote PHP code execution via crafted URLs in two parameters: _saz[settings][site_dir] to layouts/default/header.saz.php and _saz[settings][site_url] to admin/alayouts/default/pages/login....

sazcart151-rfi.txt

-========================================== ViVa Islam + YeMeN ====================================- Name : SazCart 1.5.1 Multiple Remote File Include Vulnerability Download From : http://www.sazcart.com/site/download.php?id=16 Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox , aLwHEe...