Exabytes Security Portal
Application: cpCommerce
Affected Version: 1.1.0 and other versions.
Vendor’s URL: cpCommerce
Bug Type: Cross Site Scripting and SQL injection
Risk Level: Critical
Solution:
Edit the source code to ensure that input is properly sanitized and verified.
Application: CubeCart
Affected Version: 4.2.1 and other versions.
Vendor’s URL: CubeCart
Bug Type: Cross Site Scripting
Risk Level: Medium
Solution:
Edit the source code to ensure that input is properly sanitized.
Application: Photo Cart
Affected Version: 4.1 and other versions.
Vendor’s URL: Photo Cart
Bug Type: Cross Site Scripting
Risk Level: Medium
Solution:
Apply patch. http://www.picturespro.com/sp/
Application: SoftCart
Affected Version: 5.1.2.2 and other versions.
Vendor’s URL: SoftCart
Bug Type: Cross Site Scripting
Risk Level: Medium
Solution:
Filter malicious characters and character sequences.
Application: osCommerce
Affected Version: 3.1 and other versions.
Vendor’s URL: http://addons.oscommerce.com/info/5477
Bug Type: SQL Injection
Risk Level: Critical
Solution:
Edit the source code to ensure that input is properly verified and sanitized, or disable it until patch is released.
Application: vcart
Affected Version: 3.3.2 and other versions.
Vendor’s URL: http://www.visionburst.com/
Bug Type: File Inclusion
Risk Level: Critical
Solution:
Edit the source code to ensure that input is properly verified.
Application: Zen Cart
Affected Version: 1.3.7 or other versions may be affected
Vendor’s URL: http://www.zencart.com/
Bug Type: Session Hijacking
Risk Level: Medium
Solution:
- Update to zen-cart-v1.3.7-full-patched-07012007
Application: OsCommerce 0
Vendor’s URL: http://www.oscommerce.com/
Bug Type: File Inclusion
Risk Level: High
Solution:
User must upgrade or migrate to latest version of OsCommerce.
You are currently browsing the Exabytes Security Portal weblog archives for the E-Commerce category.
Longer entries are truncated. Click the headline of an entry to read it in its entirety.
