bugtraq - [HSC Security Group] SQL Injection in Product Cart 2.6

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20050730115410.9504.qmail@securityfocus.com>
Date: 30 Jul 2005 11:54:10 -0000
From: zinho@...kerscenter.com
To: bugtraq@...urityfocus.com
Subject: [HSC Security Group] SQL Injection in Product Cart 2.6

Hackers Center Security Group (http://www.hackerscenter.com/)          
Zinho's Security Advisory           

Desc: SQL Injection in Product Cart 2.6 
Risk: Medium to High

An SQL injection affects Product Cart 2.6. Database Manipulation is possible.

viewPrd.asp?idcategory='

Vendor: http://www.earlyimpact.com/
"Our ecommerce software is used all over the world to build and manage professional Internet stores. As one of the most comprehensive ecommerce systems available today, ProductCart combines a long list of features with intuitive management tools that make it easy for anyone to build and manage their online storefront."

We are looking for security researchers into web application security field to join our crew. If you're interested get in contact with Zinho at
zinho@...kerscenter.com