21 matches found
EUVD-1999-0592
Malware in sbrugna...
EUVD-2008-0533
Malware in sbrugna...
CVE-1999-0609
An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information...
Mercantec SoftCart 4.00b - CGI Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Mercantec SoftCart CGI Overflow
No description provided by source. $Id: mercantecsoftcart.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Mercantec SoftCart - CGI Overflow (Metasploit)
$Id: mercantecsoftcart.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Mercantec Softcart CGI Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mercantec...
CVE-2008-0523
Multiple cross-site scripting XSS vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 LicensePlate, 2 LicenseState, 3 TicketDate, and 4 TicketNumber parameters. NOTE: the provenance of this information is unknown; the details...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 LicensePlate, 2 LicenseState, 3 TicketDate, and 4 TicketNumber parameters. NOTE: the provenance of this information is unknown; the details...
CVE-2008-0523
Multiple cross-site scripting XSS vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 LicensePlate, 2 LicenseState, 3 TicketDate, and 4 TicketNumber parameters. NOTE: the provenance of this information is unknown; the details...
CVE-2008-0523
CVE-2008-0523 affects SoftCart 5.1.2.2 (SoftCart.exe) with four described XSS vectors: (1) License_Plate, (2) License_State, (3) Ticket_Date, (4) Ticket_Number. The root cause is user-supplied input without proper sanitization, enabling remote scripting or HTML injection. Documents consistently r...
Mercantec SoftCart CGI Overflow
This is an exploit for an undisclosed buffer overflow in the SoftCart.exe CGI as shipped with Mercantec's shopping cart software. It is possible to execute arbitrary code by passing a malformed CGI parameter in an HTTP GET request. This issue is known to affect SoftCart version 4.00b. This module...
CVE-2004-2221
CVE-2004-2221 describes a buffer overflow in the SoftCart.exe CGI of Mercantec SoftCart 4.00b. The vulnerability allows remote attackers to execute arbitrary code by sending a long parameter in an HTTP GET request. Public references show Metasploit and Exploit-DB demonstrations of an exploit for ...
CVE-2004-2221
Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request...
CVE-2004-2221
Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request...
Mercantec SoftCart 4.00b - CGI Overflow (Metasploit)
Mercantec SoftCart 4.00b - CGI Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Mercantec SoftCart 4.00b CGI Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Mercantec SoftCart 4.00b - CGI Overflow (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mercantec...
CVE-1999-0609
CVE-1999-0609 concerns the SoftCart CGI program (SoftCart.exe). The connected records indicate an incorrect configuration that could disclose private information. There are multiple entries (NVD, Red Hat, CVE List) with identical descriptions, but no public details on affected versions, specific ...
CVE-1999-0609
An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information...