Web applications security vulnerabilities (PHP, ASP, JSP, CGI, Perl)
Published:		05.01.2006
Source:
SecurityVulns ID:		5598
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		LIZARDCART : Lizard Cart CMS 1.04
		VALDERSOFT : Valdersoft Shopping Cart 3.0
		ENHANCEDSIMPLEPH : Enhanced Simple PHP Gallery 1.
		SITESUITE : SiteSuite CMS 1.0
		NKADS : NKads 1.0
		NEXTGENERATIONIM : Next Generation Image Gallery 0.0
		ATCARD : @Card ME PHP

Original document		SECUNIA, [SA18306] @Card ME PHP "cat" Cross-Site Scripting Vulnerability (05.01.2006)
		SECUNIA, [SA18309] Next Generation Image Gallery "page" Cross-Site Scripting Vulnerability (05.01.2006)
		SECUNIA, [SA18302] NKads Login SQL Injection Vulnerability (05.01.2006)
		SECUNIA, [SA18305] SiteSuite CMS "page" SQL Injection Vulnerability (05.01.2006)
		SECUNIA, [SA18310] Enhanced Simple PHP Gallery "dir" Cross-Site Scripting Vulnerability (05.01.2006)
		SECURITEAM, [EXPL] Valdersoft Shopping Cart Remote Command Execution (Exploit) (05.01.2006)
		Aliaksandr Hartsuyeu, [eVuln] Lizard Cart CMS SQL Injection Vulnerability (05.01.2006)

Files:		Valdersoft Shopping Cart <=3.0 Remote Command Execution Exploit
Discuss:		Read or add your comments to this news (0 comments)