A-Cart suffers from SQL injection and cross site scripting vulnerabilities.
b88c9d2d5610ab94133985d2710736aabdc956242becc4ed51cd6e2b32d2d2cf__________________________
A R I A - S E C U R I T Y
___________________________
A-Cart SQL Injection And Cross-Site Scripting
http://alanward.net
Cross Site Scripting:
http://localhost/path/error.asp?msg=XSS
SQL Injection:
http://localhost/path/product.asp?productid=' SQL COMMAND
Table Names are:
categories
customers
orderitems
orders
products
users (username,fullname,password,privileges)
Credits Goes To Aria-Security Team
http://Aria-Security.Net
The-0utl4w
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed