PlexCart X3 SQL Injection Vulnerability

PlexCart X3 SQL Injection Vulnerability Vuln. discovered by : r0t Date: 19 april 2006 vendorlink:www.plexum.com/ecommerce/shoppingcart/ affected versions:X3 and previous orginal advisory: http://pridels.blogspot.com/2006/04/plexcart-x3-sql-inj.html Vuln. Description: PlexCart contains a flaw that...

CVE-2005-4315

SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly involving the 1 sitemname and 2 sorderby parameters to plexcart.pl...

CVE-2005-4315

SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly involving the 1 sitemname and 2 sorderby parameters to plexcart.pl...

CVE-2005-4315

CVE-2005-4315 involves a SQL injection in the search function of Plexum PLEXCART X3. The vulnerability could allow a remote attacker to execute arbitrary SQL commands via unspecified vectors, with possible involvement of the s_itemname and s_orderby parameters to plexcart.pl. The NVD entry lists ...

CVE-2005-4315: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly involving the 1 sitemname and 2 sorderby parameters to plexcart.pl...

PlexCart X3 SQL inj. vuln.

PlexCart X3 SQL inj. vuln. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/plexcart-x3-sql-inj-vuln.html vendor:www.plexum.com/ecommerce/shoppingcart/ affected version:3.0 and prior Product Description: Your complete eCommerce and shopping cart...

CVE-2004-0680

Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...

CVE-2004-0680

The CVE concerns the Zoom X3 ADSL modem: a terminal on port 254 can be accessed using the default HTML management password even if the HTTP interface password was changed, potentially granting remote attackers unauthorized access. No exploitation details are provided in the connected documents.

CVE-2004-0680

Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...

CVE-2004-0680: Undefined Security Weakness

Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...

[Full-Disclosure] backdoor menu on conexant chipset dsl router (Zoom X3)

i have just installed an adsl modem sold under the brand of Zoom X3 http://www.zoom.com/products/adsloverview.html and was apalled to find that an nmap scan of the external address immediately came up with the following: PORT STATE SERVICE 23/tcp open telnet 80/tcp open http 254/tcp open unknown...