Searching order software vulnerabilities

An incorrect configuration of the Order Form 1.

configuration | information | incorrect | disclose | shopping | program | private | could | Order | Form | cart | CGI |

An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.


Bugzilla 2.14 before 2.14.2, and 2.16 before 2.

Bugzilla |

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to buglist.cgi.


Integer overflow in the rnd arithmetic rounding

arithmetic | attackers | negative | FishCart | versions | function | overflow | quantity | rounding | totals" | Integer | various | "cause | before | allows | remote | order | large | rnd | via |

Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause negative totals" via an order with a large quantity.


shoprestoreorder.asp in VP-ASP 5.0 does not clo

shoprestoreorderasp | connection | attackers | restores | previous | database | service | VP-ASP | remote | denial | allows | cause | close | order | which | user | does | not |

shoprestoreorder.asp in VP-ASP 5.0 does not close the database connection when a user restores a previous order, which allows remote attackers to cause a denial of service (connection consumption).


SQL injection vulnerability in the Reviews modu

vulnerability | attackers | arbitrary | injection | parameter | PHP-Nuke | commands | Reviews | execute | module | allows | remote | order | SQL | via |

SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the order parameter.


Multiple cross-site scripting (XSS) vulnerabili

cross-site | scripting | Multiple |

Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) expand or (2) order parameter.


Cookie Cart allows remote attackers to read the

Notification | parameters | attackers | testmycgi | Cookie | allows | remote | Order | read | path | list | Cart | via |

Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi.


Multiple SQL injection vulnerabilities in list.

vulnerabilities | injection | Multiple | Exhibit | listphp | Engine | SQL |

Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) search_row, (2) sort_row, (3) order or (4) perpage parameter.


Multiple cross-site scripting (XSS) vulnerabili

cross-site | scripting | Multiple |

Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter to edit.php or (2) cid parameter to comment_edit.php.


Second-order symlink vulnerability in eix-sync.

vulnerability | Second-order | eix-syncin | symlink | Ebuild | IndeX |

Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program.


SQL injection vulnerability in search.asp in On

vulnerability | searchasp | injection | Online | Order | Suite | Work | SQL |

SQL injection vulnerability in search.asp in Online Work Order Suite (OWOS) Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.


Buffer overflow in Dropbear server before 0.47

Dropbear | overflow | before | server | Buffer |

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.


SQL injection vulnerability in CS-Cart 1.3.0 al

vulnerability | injection | CS-Cart | SQL |

SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort_by and (2) sort_order parameters to index.php.


eZ publish 3.5 through 3.7 before 20050608 requ

through | publish | before |

eZ publish 3.5 through 3.7 before Wednesday, June 08, 2005 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users.


Multiple SQL injection vulnerabilities in Moder

vulnerabilities | ModernBill | injection | Multiple | SQL |

Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execute arbitrary SQL commands via the (1) id parameter in (a) user.php, or (2) where and (3) order parameters to (b) admin.php.


Cross-site scripting (XSS) vulnerability in cal

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in calendar/Visitor.cgi in KCScripts Calendar, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order parameter.


SQL injection vulnerability in pages.asp in ASP

vulnerability | injection | Generator | pagesasp | before | Stats | ASP | SQL |

SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the order parameter.


** DISPUTED ** Directory traversal vulnerabili

vulnerability | check_votephp | Directory | traversal | DISPUTED | Contest | Drawing | Weekly |

** DISPUTED ** Directory traversal vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the order parameter. NOTE: another researcher disputes this vulnerability, noting that the order variable is not used in any context that allows opening files.


SQL injection vulnerability in check_vote.php i

vulnerability | check_votephp | injection | Drawing | Contest | Weekly | SQL |

SQL injection vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to execute arbitrary SQL commands via the order parameter.


SQL injection vulnerability in viewforum.php in

vulnerability | viewforumphp | attackers | arbitrary | injection | parameter | Postnuke | PNphpBB2 | commands | earlier | execute | allows | remote | order | SQL | 12i | via |

SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execute arbitrary SQL commands via the order parameter.


Software vulnerabilities results 1 to 20 of 69     
Page: 1234►