Searching merchant software vulnerabilities

Cross-site scripting (XSS) vulnerability in sho

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web script or HTML via the (1) merchant or (2) demo parameters.


Cross-site scripting (XSS) vulnerability in mer

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the Customer_Login parameter.


SQL injection vulnerability in browse.ihtml in

vulnerability | browseihtml | arbitrary | injection | attackers | Merchant | commands | execute | remote | allows | iHTML | Mall | via | SQL |

SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the (1) id, (2) store, and (3) step parameters.


SQL injection vulnerability in merchant.ihtml i

vulnerability | merchantihtml | attackers | arbitrary | injection | Merchant | commands | execute | Version | allows | remote | iHTML | via | SQL | Pro |

SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitrary SQL commands via the (1) step, (2) id, and (3) pid parameters.


Cross-site scripting vulnerability in category.

vulnerability | categoryphp | Cross-site | arbitrary | parameter | scripting | attackers | Merchant | Shopping | Modular | script | inject | allows | remote | Cart | HTML | web | cat | via |

Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter.


SQL injection vulnerability in viewcart.asp in

vulnerability | viewcartasp | injection | shopping | Evolve | cart | SQL |

SQL injection vulnerability in viewcart.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the zoneid parameter.


** DISPUTED ** SQL injection vulnerability in

vulnerability | productsasp | injection | shopping | DISPUTED | Evolve | cart | SQL |

** DISPUTED ** SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error.


PHP remote file inclusion vulnerability in help

vulnerability | help/indexphp | inclusion | Merchant | remote | file | PHP |

PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the show parameter.


Software vulnerabilities results 1 to 9 of 9     
Page: 1