Vivid Ads Shopping Cart (prodid) Remote SQL Injection

No description provided by source. ?php Vivid Ads Shopping Cart prodid Remote SQL Injection Author: Pr0T3cT10n, pr0t3ct10natgmaildotcom This code was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Dork: "Vivid Ads Shopping Cart"...

Vivid Ads Shopping Cart - prodid SQL Injection

Vivid Ads Shopping Cart - prodid SQL Injection /', $contents, $matches echo'User: ' .$matches1. ';'."\n".'Pass: ' .$matches2. ';'."\n".'Admin login: http://' .$site.$path. '/admin/'."\n"; else echo'Can't pull out admin details.'."\n"; else echo'Can't write socket.'."\n"; ?...

Vivid Ads Shopping Cart (prodid) Remote SQL Injection

Exploit for unknown platform in category web applications ===================================================== Vivid Ads Shopping Cart prodid Remote SQL Injection ===================================================== /', $contents, $matches echo'User: ' .$matches1. ';'."\n".'Pass: ' .$matches2...

Vivid Ads Shopping Cart - 'prodid' SQL Injection

/', $contents, $matches echo'User: ' .$matches1. ';'."\n".'Pass: ' .$matches2. ';'."\n".'Admin login: http://' .$site.$path. '/admin/'."\n"; else echo'Can't pull out admin details.'."\n"; else echo'Can't write socket.'."\n"; ?...

Cross site scripting

Cross-site scripting XSS vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbitrary web script or HTML via the email parameter in a subscribed action, a different vector than CVE-2005-1823...

CVE-2009-3592

Cross-site scripting XSS vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbitrary web script or HTML via the email parameter in a subscribed action, a different vector than CVE-2005-1823...

CVE-2009-3592

Cross-site scripting XSS vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbitrary web script or HTML via the email parameter in a subscribed action, a different vector than CVE-2005-1823...

CVE-2009-3592

CVE-2009-3592 is a documented XSS in Qualiteam X-Cart. The vulnerability affects the customer/home.php path via the email parameter in a subscribed action, allowing remote attackers to inject arbitrary script/HTML. This is a distinct vector from CVE-2005-1823. The entry carries a MEDIUM risk (CVS...

X-Cart Email Subscription - email Cross-Site Scripting

X-Cart Email Subscription - email Cross-Site Scripting source: https://www.securityfocus.com/bid/36601/info X-Cart is prone to a cross-site scripting vulnerability in the email subscription component because the application fails to sufficiently sanitize user-supplied input. An attacker may...

X-Cart Email Subscription - 'email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36601/info X-Cart is prone to a cross-site scripting vulnerability in the email subscription component because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

X-Cart email subscription xss

Exploit for unknown platform in category web applications ============================= X-Cart email subscription xss ============================= X-Cart XSS in email subscription Download: http://www.x-cart.com/ Discovered by: Paulo Santos...

X-Cart email subscription xss

No description provided by source. X-Cart XSS in email subscription Download: http://www.x-cart.com/ Discovered by: Paulo Santos Contact: [email protected] Blog: http://infocampo.wordpress.com http://target/path/customer/home.php?mode=subscribed&email=plaintext/...

X-Cart Email Subscription Cross Site Scripting

X-Cart XSS in email subscription Download: http://www.x-cart.com/ Discovered by: Paulo Santos Contact: [email protected] Blog: http://infocampo.wordpress.com http://target/path/customer/home.php?mode=subscribed&email=...

Toner Cart SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

CVE-2009-3215

SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter...

Sql injection

SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter...

CVE-2009-3215

The CVE-2009-3215 entry describes an SQL injection in IXXO Cart Standalone prior to 3.9.6.1 and the IXXO Cart Joomla! 1.0.x component. The root cause is unsafely handling the parent parameter, enabling remote attackers to execute arbitrary SQL commands. Affected software includes IXXO Cart Standa...

CVE-2009-3215

SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter...

Qualiteam X-Cart远程命令执行漏洞

BUGTRAQ: 9560 X-Cart没有充分过滤URI的参数值，远程攻击者可以利用这个漏洞以WEB进程权限执行任意命令。 问题存在与'admin/general.php'脚本上，由于对perlbinary参数值缺少充分过滤，提交任意SHELL命令，可导致以WEB进程权限在系统上执行任意命令。 Qualiteam X-Cart 3.4.11 Qualiteam X-Cart 3.4.3 Qualiteam X-Cart 3.4 .0 Qualiteam X-Cart 3.3.2 Qualiteam X-Cart 3.3 .0 Qualiteam X-Cart 3.2.1 Qualite...

Qualiteam X-Cart多个远程信息泄露漏洞

BUGTRAQ: 9563 X-Cart没有充分过滤URI的参数值，远程攻击者可以利用这个漏洞以WEB进程权限查看任意文件内容或获得敏感信息。 'customer/auth.php'脚本对'shopclosedfile'参数缺少充分过滤，攻击者提交包含多个'../'字符的参数，可绕过WEB ROOT限制，以WEB进程权限查看任意文件内容。 另外'admin/general.php'脚本对'mode'参数也缺少充分限制，提交特殊参数可获得PHP和PERL程序的详细信息。 X-Cart 3.4.3 厂商补丁： Qualiteam ---------...