CGI abuses : ProductCart SQL Injection

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 146377 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.11785

Categoría: CGI abuses

Título: ProductCart SQL Injection

Resumen: NOSUMMARY

Descripción: Description:

The remote host is using the ProductCart software suite.

This set of CGIs is vulnerable to a SQL injection bug which may allow
an attacker to take the control of the server as an administrator.
From there, he can obtain the list of customers, steal their credit
card information and more.

In addition to this, this software is vulnerable to various
file disclosure and cross site scripting flaws.

Solution : Upgrade to the latest version of ProductCart
Risk factor : High

Referencia Cruzada: BugTraq ID: 8103
BugTraq ID: 8105
BugTraq ID: 8108
BugTraq ID: 8112

Copyright This script is Copyright (C) 2003 Tenable Network Security

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.11785
Categoría:	CGI abuses
Título:	ProductCart SQL Injection
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is using the ProductCart software suite. This set of CGIs is vulnerable to a SQL injection bug which may allow an attacker to take the control of the server as an administrator. From there, he can obtain the list of customers, steal their credit card information and more. In addition to this, this software is vulnerable to various file disclosure and cross site scripting flaws. Solution : Upgrade to the latest version of ProductCart Risk factor : High
Referencia Cruzada:	BugTraq ID: 8103 BugTraq ID: 8105 BugTraq ID: 8108 BugTraq ID: 8112
Copyright	This script is Copyright (C) 2003 Tenable Network Security