"Online Store – Powered by ProductCart"

• SHDB
• 2338 阅读

• 日期：2004-10-10
• 类别：
  • Advisories and Vulnerabilities
• 作者：anonymous
• 语法："Online Store – Powered by ProductCart"

• ProductCart is "an ASP shopping cart that combines sophisticated ecommerce features with time-saving store management tools and remarkable ease of use. It is widely used by many e-commerce sites". Multiple SQL injection vulnerabilities have been found in the product, they allow anything from gaining administrative privileges (bypassing the authentication mechanism), to executing arbitrary code. http://www.securityfocus.com/bid/8105 (search SF for more)