XCart 5.2.6 Shell Upload

Security Advisory - Curesec Research Team 1. Introduction Affected Product: XCart 5.2.6 Fixed in: 5.2.7 Fixed Version Link: https://www.x-cart.com/xc5kit Vendor Contact: [email protected] Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 08/13/2015 Disclosed to publi...

XCart 5.2.6 - Code Execution

XCart 5.2.6 - Code Execution !/usr/local/bin/python Exploit for XCart 5.2.6 Code Execution vulnerability An admin account is required to use this exploit Curesec GmbH import sys import re import requests requires requests lib if lensys.argv != 4: exit"usage: python " + sys.argv0 + "...

XCart 5.2.6 Code Execution

!/usr/local/bin/python Exploit for XCart 5.2.6 Code Execution vulnerability An admin account is required to use this exploit Curesec GmbH import sys import re import requests requires requests lib if lensys.argv != 4: exit"usage: python " + sys.argv0 + " http://example.com/xcart/ [email protected]...

XCart 5.2.6 Path Traversal

Security Advisory - Curesec Research Team 1. Introduction Affected Product: XCart 5.2.6 Fixed in: 5.2.7 Fixed Version Link: https://www.x-cart.com/xc5kit Vendor Contact: [email protected] Vulnerability Type: Path Traversal Remote Exploitable: Yes Reported to vendor: 08/13/2015 Disclosed to publi...

XCart 5.2.6 - Code Execution

!/usr/local/bin/python Exploit for XCart 5.2.6 Code Execution vulnerability An admin account is required to use this exploit Curesec GmbH import sys import re import requests requires requests lib if lensys.argv != 4: exit"usage: python " + sys.argv0 + " http://example.com/xcart/ [email protected]...

XCart 5.2.6 Cross Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: XCart 5.2.6 Fixed in: 5.2.7 Fixed Version Link: https://www.x-cart.com/xc5kit Vendor Contact: [email protected] Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 08/13/2015 Disclosed to public: 11/04/20...

xcart-rfi.txt

xCart Remote file inclusion Download script : http://www.x-cart.com// Discovered By : aLiiF a.k.a arif @debuteam 07/09/2007 HomePage : http://www.debuteam.net// Thx to : Debu Newbie Payment Yogac nyubi Rozi ^S0ng0ku^ Kuris Sonix Toxicity newbi3 R4yn4ld0 DisJocKey s3ng0k homeedition Holong...