Xia Shing Zee

6 exploits Active since Apr 2009
CVE-2008-6758 EXPLOITDB WRITEUP
Viart Shop - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting (XSS) attacks via the cart_name parameter in a save action.
CVE-2008-6757 EXPLOITDB text WRITEUP
ViArt Shop 3.5 - Cross-Site Scripting via Manuals Search Parameter
Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to inject arbitrary web script or HTML via the manuals_search parameter.
CVE-2008-6765 EXPLOITDB text WRITEUP
ViArt Shop 3.5 - Unauthenticated Arbitrary Shopping Cart Access via cart_name Parameter
ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cart_name parameter.
EIP-2026-103777 EXPLOITDB text WRITEUP
HyperVM - File Permissions Credential Disclosure
CVE-2009-1349 EXPLOITDB text WORKING POC
C2Net Stronghold 2.3 - Cross-Site Scripting via URI
Cross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI.
EIP-2026-102410 EXPLOITDB text WRITEUP
MoinMoin 1.5.8/1.9 - Cross-Site Scripting / Information Disclosure