Show filters
30 Total Results
Displaying 21-30 of 30
Sort by:
Attacker Value
Unknown
CVE-2009-4060
Disclosure Date: November 24, 2009 (last updated October 04, 2023)
SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter.
0
Attacker Value
Unknown
CVE-2008-5783
Disclosure Date: December 31, 2008 (last updated October 04, 2023)
admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1.
0
Attacker Value
Unknown
CVE-2008-3502
Disclosure Date: August 06, 2008 (last updated October 04, 2023)
Unspecified vulnerability in Best Practical Solutions RT 3.0.0 through 3.6.6 allows remote authenticated users to cause a denial of service (CPU or memory consumption) via unspecified vectors related to the Devel::StackTrace module for Perl.
0
Attacker Value
Unknown
CVE-2006-4267
Disclosure Date: August 21, 2006 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) oid parameter in modules/gateway/Protx/confirmed.php and the (2) x_invoice_num parameter in modules/gateway/Authorize/confirmed.php.
0
Attacker Value
Unknown
CVE-2006-4268
Disclosure Date: August 21, 2006 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) file, (2) x, and (3) y parameters in (a) admin/filemanager/preview.php; and the (4) email parameter in (b) admin/login.php.
0
Attacker Value
Unknown
CVE-2006-1038
Disclosure Date: March 07, 2006 (last updated February 22, 2025)
Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a "narrow" string.
0
Attacker Value
Unknown
CVE-2006-0922
Disclosure Date: February 28, 2006 (last updated February 22, 2025)
CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, which results in an absolute path traversal vulnerability in FileUpload in connector.php (aka upload.php) that allows remote attackers to upload arbitrary files via a modified CurrentFolder parameter in a direct request to admin/filemanager/upload.php.
0
Attacker Value
Unknown
CVE-2000-0254
Disclosure Date: April 14, 2000 (last updated February 22, 2025)
The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.
0
Attacker Value
Unknown
CVE-2000-0253
Disclosure Date: April 11, 2000 (last updated February 22, 2025)
The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.
0
Attacker Value
Unknown
CVE-2000-0252
Disclosure Date: April 11, 2000 (last updated February 22, 2025)
The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
0
