SAP E-Commerce Code Injection Vulnerability

SAP E-Commerce is a set of e-commerce solutions from Germany's SAP. A code injection vulnerability exists in SAP E-Commerce, which arises from the failure of a network system or product to properly filter specific elements of externally entered data during the construction of a code segment, and...

IBM WebSphere Commerce Code Injection Vulnerability

IBM WebSphere Commerce is a suite of e-business solutions from IBM in the United States. The solution supports all sales business models, including B2C, B2B and B2B2C, on a single customer interaction platform. A security vulnerability exists in IBM WebSphere Commerce that stems from the program'...

Boozt Fashion AB: Make victim buy in attacker's account without any idea - http://www.booztlet.com/

INTRODUCTION ------------------------ During the testing of http://www.booztlet.com/ I have noticed that the account related links available from https://www.boozt.com/ are also available in http://www.booztlet.com/. This should not be the case, as this shop doesn't have a "My account" section...

XT-Commerce 1.0 Beta 1 - Pass Create and Download Backup

XT-Commerce 1.0 Beta 1 - Pass Create and Download Backup ======================================================================================== | Title : XT-Commerce v1 Beta 1 = by Pass / Creat and Download Backup Vulnerability | Author : indoushka | email : [email protected] | Dork : Power...

XT-Commerce 1 Beta 1 Create / Download Backup

======================================================================================== | Title : XT-Commerce v1 Beta 1 = by Pass / Creat and Download Backup Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by XT-Commerce | Tested on: windows SP2 Français V.Pnx...

CVE-2007-5801

Technical details for CVE-2007-5801 are not publicly available in the provided documents; no affected versions, exploitation details, or fixes are disclosed here. Monitor for updates.

[UNIX] Online Store Kit SQL Injection Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

McMurtrey/Whitaker & Associates Cart32 3.0/3.1/3.5 - Full Path Disclosure

source : https://www.securityfocus.com/bid/1932/info Cart32 is a shopping cart application for e-commerce enabled sites. Cart32 contains a vulnerability which reveals server information. Requesting a specially crafted URL, by way of the CGI application, will reveal the physical path to the web ro...