a.shopkart vulnerabilities and exploits

(subscribe to this query)

Katrien De Graeve a.shopKart 2.0 (aka ashopKart20) stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download a database via a direct request for (1) admin/scart.mdb and possibly (2) admin/scart97.mdb.

A.shopkart A.shopkart 2.0

Multiple SQL injection vulnerabilities in (1) addcustomer.asp, (2) addprod.asp, and (3) process.asp in a.shopKart 2.0.3 allow remote malicious users to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters.

Urlogy A.shop.kart 2.0.3

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook