Multiple PHP Toolkit for PayPal Vulnerabilities

Vendor: Patrick Breitenbach and Dave Nielsen http://paypal.sf.net/ Versions affected: PHP Toolkit for PayPal v0.50 and may be prior Date: 12th January 2006 Type of Vulnerability: Sensitive Information Disclosure and Payment System Bypass Severity: Critical Solution Status: Unpatched Vendor was...

PPCal Shopping Cart XSS

PPCal Shopping Cart XSS Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ppcal-shopping-cart-xss.html vendor:http://www.paypalshoppingcart.org/ affected version:3.3.0 and prior Product Description: PPCal Shopping Cart allows integration and...

phpYellowTM Pro Edition SQL inj. vuln.

phpYellowTM Pro Edition SQL inj. vuln. Vuln. dicovered by : r0t Date: 3 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpyellowtm-pro-edition-sql-inj-vuln.html Vendor:http://phpyellow.com/ affected version: phpYellowTM Pro Edition 5.33 and phpYellowTM Lite Edition 5.33 Product...

QualityPPC XSS vuln.

QualityPPC XSS vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/qualityppc-xss-vuln.html Vendor:http://www.qualityebiz.com/main/qppc.php affected version:1553 and prior Product Description: QualityPPC has the latest technology which offers you...

Template Seller Pro 3.25

AlstraSoft Template Seller Pro 3.25 =================================== Software: AlstraSoft Template Seller Pro 3.25 Severity: Arbitrary code execution, SQL Injections Risk: High Author: Robin Verton [email protected] Date: Nov. 15 2005 Vendor: www.alstrasoft.com Description: Ever thought of...

efriends.txt

AlstraSoft E-Friends Remote command exucetion Site : http://www.alstrasoft.com/efriends.htm Description : AlstraSoft E-Friends is an online social networking software that allows you to start your own site just like Friendster and Tribe.net. The E-Friends software allows members to connect to...

AlstraSoft E-Friends Remote Command Exucetion

AlstraSoft E-Friends Remote command exucetion Site : http://www.alstrasoft.com/efriends.htm Description : AlstraSoft E-Friends is an online social networking software that allows you to start your own site just like Friendster and Tribe.net. The E-Friends software allows members to connect to...

aMember Pro 2.3.X - Remote File Include Vulnerability

aMember Pro 2.3.X - Remote File Include Vulnerability NewAngels Advisory 2 aMember Pro 2.3.X - Remote File Include Vulnerability ============================================================================= Software: aMember Pro 2.3.4 Type: Remote PHP File Include Vulnerability Risk: High Date:...

[NewAngels Advisory] aMember Pro 2.3.X - Remote File Include Vulnerability

NewAngels Advisory 2 aMember Pro 2.3.X - Remote File Include Vulnerability ======================================================================== ===== Software: aMember Pro 2.3.4 Type: Remote PHP File Include Vulnerability Risk: High Date: Aug. 16 2005 Vendor: CGI Central Credit: =======...

aMemberPro234.txt

NewAngels Advisory 2 aMember Pro 2.3.X - Remote File Include Vulnerability ============================================================================= Software: aMember Pro 2.3.4 Type: Remote PHP File Include Vulnerability Risk: High Date: Aug. 16 2005 Vendor: CGI Central Credit: =======...

paypalFlaw.txt

PayPal 'butons' price manipulation. vendor url:https://www.paypal.com/ http://lostmon.blogspot.com/2005/05/ paypal-arbitrary-price-manipulation.html vendor notify: yes exploit available: yes Discovered by FalconDeOro1 and Lostmon2 PayPal buttons are prone to price manipulation. all stores based o...

CVE-2004-2247

Technical details for CVE-2004-2247 are not publicly available in the provided documents; no concrete affected product, impact, or exploit information is given. Monitor for updates.

CVE-2005-0936

Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-0897

PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code...

CVE-2005-1362

Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the 1 intProdID parameter to product.asp, 2 intCatalogID or 3 strSubCatalogID parameters to productsByCategory.asp, 4 chkText, 5 strText, 6 chkPrice, 7 intPrice, 8 chkCat...

CVE-2005-0935

Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the 1 idpages parameter to pages.php or the 2 id2 parameter to products1.php...

CVE-2005-1362

CVE-2005-1362 affects MetaCart 2.0 for Paypal. The vulnerability consists of multiple SQL injection flaws exploitable via parameters to specific scripts: (1) intProdID to product.asp, (2) intCatalogID or (3) strSubCatalogID to productsByCategory.asp, and (4) chkText, (5) strText, (6) chkPrice, (7...

CVE-2005-1362

Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the 1 intProdID parameter to product.asp, 2 intCatalogID or 3 strSubCatalogID parameters to productsByCategory.asp, 4 chkText, 5 strText, 6 chkPrice, 7 intPrice, 8 chkCat...

Multiple SQL Injections in MetaCart2 for PayPal

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple SQL Injections in...

CVE-2005-0935

Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the 1 idpages parameter to pages.php or the 2 id2 parameter to products1.php...