Security Alert: Valdersoft Shopping Cart <= 3.0 Remote Command Exploit

Thread Rating:

0 Vote(s) - 0 Average
1
2
3
4
5

Threaded Mode | Linear Mode

Security Alert: Valdersoft Shopping Cart <= 3.0 Remote Command Exploit

01-05-2006, 11:12 AM,

Post: #1

mandy Offline

Administrator

Posts: 9,932
Likes Given: 0
Likes Received: 6 in 5 posts
Joined: Feb 2011
Reputation: 0

Security Alert: Valdersoft Shopping Cart <= 3.0 Remote Command Exploit

Quote:## 2. explanation
#
# various files within 'include\templates\categories' contains unsanitized and undefined
# variables which can allow remote file inclusion, leading to remote command execution.
# this can be done by entering a remote url within the 'catalogDocumentRoot' variable.
#

full article and details of exploit: http://www.addict3d.org/index.php?page=viewarticle&type=security&ID=5763&title=Valdersoft%20Shopping%20Cart%20%3C=%203.0%20Remote%20Command%20Execution%20Exploit

« Next Oldest | Next Newest »

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	Ecommerce Shopping Cart Software	rashida	3	3,884	05-14-2011, 03:01 PM Last Post: jacky.souer
	Which Shopping Cart Do You Use?	allmusicsearch	30	21,267	05-14-2011, 02:53 PM Last Post: jacky.souer
	Shopping Cart Directory and Reviews	amy	2	4,846	04-30-2011, 10:06 AM Last Post: jacky.souer
	Free Open Source Shopping Cart PrestaShop Releases Version 1.0	mandy	13	13,432	03-09-2010, 05:24 PM Last Post: tomerg3
	EOS Online Merchant Shopping Cart: Free Open Source osCommerce/CRE Loaded Based	regic	4	5,576	02-02-2009, 07:35 PM Last Post: SupremeC
	Review of Interspire Shopping Cart Solutions	mandy	0	2,747	08-12-2008, 01:04 PM Last Post: mandy
	Going Outside The Cart To Improve The User Experience	mandy	0	2,615	08-04-2008, 10:20 AM Last Post: mandy
	Shopping Cart Checkout Page Wording: "Voucher Code" vs "Coupon Code"	mandy	0	3,817	08-02-2008, 11:49 AM Last Post: mandy
	Adding Shopping Cart Functionality Can Increase Sales	mandy	0	3,211	06-28-2008, 11:43 AM Last Post: mandy
	Ecommerce Shopping Cart Field Test	Kristijntje	1	3,364	05-29-2008, 10:25 AM Last Post: mandy

Forum Jump:

Users browsing this thread: 1 Guest(s)