Niushop_b2c Wchat.php file has xml entity injection vulnerability

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . Niushopb2c official version 1.0 of the Wchat.php file exists xml entity injection vulnerability , due to t...

Multiple XSS Vulnerabilities in PHPSHE B2C Mall System v1.5

PHPSHE online shopping mall system provides users with a low-cost, high-efficiency online shopping mall construction program. Multiple XSS vulnerabilities exist in PHPSHE B2C Mall System v1.5. An attacker can exploit this vulnerability to obtain information such as login cookies of administrative...

PHPSHE B2C 注入第一枚、

简要描述： PHPSHE B2C商城系统 v1.2build 20140519 UTF8 详细说明： 在index.php中 $cachecategoryarr = cache::get'categoryarr'; $cacheclass = cache::get'class'; $cachead = cache::get'ad'; $cachelink = cache::get'link'; $cachepage = cache::get'page'; $webqq = $cachesetting'webqq''settingvalue' ? explode',',...

PHPSHE B2C 重装。

简要描述： PHPSHE B2C商城系统 v1.2build 20140519 UTF8 看到更新了 下一个下来看看。 我擦 敢判断一下lock吗? 详细说明： 在install/index.php errorreportingEALL ^ ENOTICE; datedefaulttimezoneset'PRC'; header'Content-Type: text/html; charset=utf-8'; //改写不安全的registerglobal和防sql注入处理 if @iniget'registerglobals' foreach$REQUEST as $name =...

PHPSHE B2C商城系统 sql注入

简要描述： sql注入，可获取数据库任意信息 详细说明： sql注入，可获取数据库任意信息 漏洞触发位置，已经触发函数 构造一个关联数组，键就是sql语句，用serialize序列化 将序列化之后的值作为cookie 漏洞证明： 访问以下...

PHPSHE B2C商城系统通杀SQL注入漏洞

No description provided by source...

ECSHOP 2.6 calendar.php本地包含漏洞

ECShop是一款B2C独立网店系统,适合企业及个人快速构建个性化网上商店。系统是基于PHP语言及MYSQL数据库构架开发的跨平台开源程序。 在文件js/calendar.php中： code$lang = !empty$GET'lang' ? trim$GET'lang' : 'zhcn'; if !fileexists'../languages/' . $lang . '/calendar.php' $lang = 'zhcn'; requiredirnamedirnameFILE . '/data/config.php'; header'Content-type:...

B2C Booking Centre Systems SQL Injection

B2C Booking Centre Systems - SQL Injection Vulnerability Name B2D Booking Centre Systems Vendor http://www.bookingcentre.eu Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X. INDEX I. ABOUT THE APPLICATION II...

B2C Booking Centre Systems - SQL Injection

Name B2D Booking Centre Systems Vendor http://www.bookingcentre.eu Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III. ANALYSIS IV. SAMPLE CODE V. FIX VI...

B2C Booking Centre Systems - SQL Injection

B2C Booking Centre Systems - SQL Injection Name B2D Booking Centre Systems Vendor http://www.bookingcentre.eu Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION II...

B2C StoreBuilder Designer 2.0 SQL Injection

--------------------------------------------------------- Portal Name:B2C StoreBuilder Designer Version: 2.0 Vendor: http://www.etoshop.com Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir Vulnerability : Auth Bypass SQL Injection Vulnerability...