CVE-2008-5791

Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 aka 1.1.0.1 have unknown impact and attack vectors, related to the 1 bankwire module, 2 cheque module, and other components...

Code injection

Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 aka 1.1.0.1 have unknown impact and attack vectors, related to the 1 bankwire module, 2 cheque module, and other components...

CVE-2008-5791

Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 aka 1.1.0.1 have unknown impact and attack vectors, related to the 1 bankwire module, 2 cheque module, and other components...

CVE-2008-5791

Technical details about CVE-2008-5791 are not publicly available in the provided documents. No concrete affected products, components, versions, or remediation are specified. Monitor for updates from the connected sources.

CVE-2008-5609

SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-5609

SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-5609

CVE-2008-5609 describes an SQL injection vulnerability in the TYPO3 Commerce extension (versions 0.9.6 and earlier). The underlying issue is a SQL injection flaw that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The affected product is TYPO3 with the Commerce...

CVE-2008-5223

SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

Sql injection

SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2008-5223

SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2008-5223

The CVE-2008-5223 issue affects Airvae Commerce 3.0 via a SQL injection in index.php, exploitable through the pid parameter. The vulnerability is evidenced by multiple references (NVD/NIST, CVE listings) and classed with a high base score (7.5) under CVSSv2: NETWORK attack vector, LOW attack comp...

premultivendor-sqlcookie.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Pre Multi-Vendor Shopping Malls Multipl...

Joomla! Component VirtueMart Google Base 1.1 - Remote File Inclusion

Joomla! Component VirtueMart Google Base 1.1 - Remote File Inclusion ================================================================================================================================ o VirtueMart Google Base Component 1.1 Remote File Inclusion Vulnerability Software : comgooglebase...

Joomla! Component VirtueMart Google Base 1.1 - Remote File Inclusion

================================================================================================================================ o VirtueMart Google Base Component 1.1 Remote File Inclusion Vulnerability Software : comgooglebase version 1.1 Vendor : www.e-commerce-solution.co.uk Download :...

Wordpress Plugin e-Commerce <= 3.4 Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand99999 . ".php"; no int print INTRO; messy print i know.. - Wordpress Plugin e-Commerce = 3.4 Arbitrary File Upload - Discovered && Coded by: t0pP8uZz Discover...

wpecomm-upload.txt

!/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand99999 . ".php"; no int print ; print "\nEnter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url...

WordPress Plugin E-Commerce 3.4 - Arbitrary File Upload

!/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand99999 . ".php"; no int print ; print "\nEnter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url...

WordPress Plugin E-Commerce 3.4 - Arbitrary File Upload

WordPress Plugin E-Commerce 3.4 - Arbitrary File Upload !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand99999 . ".php"; no int print ; print "\nEnter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $...

Unfixed XSS vulnerability at www.sparkfun.com

Security researcher SaMTHG, has submitted on 23/10/2008 a cross-site-scripting XSS vulnerability affecting www.sparkfun.com, which at the time of submission ranked 30494 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is currentl...