CVE-2007-2548

Summary: CVE-2007-2548 concerns TurnkeyWebTools SunShop Shopping Cart 4.0 with an issue in index.php described as a vulnerability tied to cookie manipulation and a remote attack vector . The exact impact is listed as unknown in the description. The available data indicate a remote, low-complexity...

CVE-2007-2070

Turnkey Web Tools SunShop Shopping Cart is affected by CVE-2007-2070 due to multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to trigger arbitrary PHP code execution by supplying a crafted URL in the abs_path parameter to index.php or checkout.php. The issue affects ...

CVE-2007-2549

CVE-2007-2549 affects TurnKeyWebTools SunShop Shopping Cart 4.0. SQL injection in index.php via the (1) c or (2) quantity parameter allows remote attackers to execute arbitrary SQL commands. Root cause is unsanitized input in index.php that enables SQL commands to reach the database. The connecte...

CVE-2007-2547

The CVE-2007-2547 entry concerns SunShop Shopping Cart 4.0 (TurnkeyWebTools). A cross-site scripting (XSS) vulnerability exists in index.php, exploitable via the l parameter to inject arbitrary web script or HTML. The connected sources confirm the affected component and parameter but do not provi...

CVE-2007-4597

Technical details about CVE-2007-4597 are not publicly provided in the supplied connected documents; monitor for updates.

CVE-2007-2474

CVE-2007-2474 involves multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0. The issue allows remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter targeting files such as include/payment/payflow_pro.php, global.php, or lib...