EUVD-2007-4637

Malware in sbrugna...

EUVD-2007-0563

Malware in sbrugna...

Couffin Simple Shopping Basket XSS

Couffin - simple shopping basket - cross site scripting XSS Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 3 january, 2010 Software Information + Vendor : http://auberger.com/software/couffin + Download : http://auberger.com/software/couffin + version : - +...

Shopping Basket Professional vulnerable to OS command injection

Overview Shopping Basket Professional provided by CGI RESCUE contains a vulnerability which allows a remote attacker to inject an arbitrary OS command as it does not properly validate input data. Impact A remote attacker could execute an arbitrary OS command on the server where Shopping Basket...

Shopping Basket Pro directory traversal vulnerability

Overview A directory traversal vulnerability exists in Shopping Basket Pro from CGI RESCUE. Shopping Basket Pro from CGI RESCUE is shopping cart software. A directory traversal vulnerability exists in Shopping Basket Pro. Impact A remote attacker could obtain a list of the file and directory name...

CVE-2007-4655

Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to 1 list.cgi or 2 list2.cgi...

CVE-2007-4655

The CVE-2007-4655 entry describes a directory traversal vulnerability in CGI RESCUE Shopping Basket Professional (Shopping Basket Pro) with versions 7.51 and earlier. The flaw allows remote attackers to enumerate or read arbitrary files and directories via traversal sequences in unspecified param...

CVE-2007-0565

CGI-Rescue Shopping Basket Professional 7.50 and earlier allows remote attackers to inject arbitrary operating system commands via unspecified vectors...

CVE-2007-0565

Shopping Basket Professional by CGI RESCUE (v7.50 and earlier) is affected by an OS command injection vulnerability. The issue arises from improper handling/validation of input data, allowing a remote attacker to inject and execute arbitrary OS commands. This is based on the JVN entry describing ...

JVN#82258242 Shopping Basket Professional vulnerable to OS command injection

Impact A remote attacker could execute an arbitrary OS command on the server where Shopping Basket Professional v7 is installed. Solution Products Affected Shopping Basket Professional v7.50 and earlier For more information, refer to the vendor's website...