ZeusCart <= 2.0 (category_list.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== ZeusCart = 2.0 categorylist.php SQL Injection Vulnerability ===============================================================...

ZeusCart 2.0 - category_list.php SQL Injection

ZeusCart 2.0 - categorylist.php SQL Injection --==+================================================================================+==-- --==+ ZeusCart = 2.0 categorylist.php Remote SQL Injection Vulnerbility +==--...

ZeusCart 2.0 - 'category_list.php' SQL Injection

--==+================================================================================+==-- --==+ ZeusCart = 2.0 categorylist.php Remote SQL Injection Vulnerbility +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On...

CVE-2008-2020

The CAPTCHA implementation as used in 1 Francisco Burzi PHP-Nuke 7.0 and 8.1, 2 my123tkShop e-Commerce-Suite aka 123tkShop 0.9.1, 3 phpMyBitTorrent 1.2.2, 4 TorrentFlux 2.3, 5 e107 0.7.11, 6 WebZE 0.5.9, 7 Open Media Collectors Database aka OpenDb 1.5.0b4, and 8 Labgab 1.1 uses a codebg.jpg...

CVE-2008-2020

The CVE-2008-2020 issue affects multiple CAPTCHA implementations: PHP-Nuke (versions 7.0–8.1), my123tkShop 0.9.1, phpMyBitTorrent 1.2.2, TorrentFlux 2.3, e107 0.7.11, WebZE 0.5.9, Open Media Collectors Database 1.5.0b4, and Labgab 1.1. The root cause is use of a code_bg.jpg background with PHP Im...

CVE-2008-1839

CVE-2008-1839 affects WORK system e-commerce 4.0.9. The vulnerability is described as multiple cross-site scripting (XSS) in module/main.php, exploitable via the (1) day, (2) month, and (3) year parameters. The notes indicate not all provenance is confirmed and details come from third-party sourc...

CVE-2008-1839

Multgiple cross-site scripting XSS vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 day, 2 month, and 3 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...

CPCommerce 1.1.0 - Cross-Site Scripting Local File Inclusion

CPCommerce 1.1.0 - Cross-Site Scripting Local File Inclusion www.BugReport.ir AmnPardaz Security Research Team Title: cpCommerce Multiple Vulnerabilities Vendor: http://cpcommerce.cpradio.org Bugs: XSS, SQL Injection , Local File Inclusion Vulnerable Version: 1.1.0 prior versions also may be...

cpCommerce 1.1.0 (XSS/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== cpCommerce 1.1.0 XSS/LFI Multiple Remote Vulnerabilities ========================================================== AmnPardaz Security Research Team Title: cpCommerce Multiple...

CPCommerce 1.1.0 - Cross-Site Scripting / Local File Inclusion

www.BugReport.ir AmnPardaz Security Research Team Title: cpCommerce Multiple Vulnerabilities Vendor: http://cpcommerce.cpradio.org Bugs: XSS, SQL Injection , Local File Inclusion Vulnerable Version: 1.1.0 prior versions also may be affected Exploitation: Remote with browser Fix: N/A Original...

phpshop081-sql.txt

+¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª-+ Web Application: phpSHOP 0.8.1 SQL Injection Description: SQL Injection in Web E-commerce OpenSource application phpSHOP in login.php script. +¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª-+ author: y2h4ck e-mail: y2h4ck at gmail.com page: http://y2h4ck.wordpress.com...

Debian Security Advisory DSA 471-1 (interchange)

The remote host is missing an update to interchange announced via advisory DSA 471-1. OpenVAS Vulnerability Test $Id: deb4711.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 471-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 150-1 (interchange)

The remote host is missing an update to interchange announced via advisory DSA 150-1. OpenVAS Vulnerability Test $Id: deb1501.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 150-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-471)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0281

SQL injection vulnerability in liste.php in ID-Commerce 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idFamille parameter...

Sql injection

SQL injection vulnerability in liste.php in ID-Commerce 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idFamille parameter...

CVE-2008-0281

CVE-2008-0281 is a SQL injection vulnerability in liste.php of ID-Commerce 2.0 and earlier, where the idFamille parameter allows remote attackers to execute arbitrary SQL commands. The public records identify the affected component as ID-Commerce 2.0 (and earlier) with a likely input vector via i...

ID-Commerce 'liste.php' SQL注入漏洞

BUGTRAQ ID: 27220 CNCAN ID:CNCAN-2008011404 ID-Commerce是一款基于PHP的WEB应用程序。 ID-Commerce不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'liste.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 ID-Commerce 2.0 厂商解决方案 目前没有解决方案提供： http://www.id-commerce.com/...

[Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001

Blind SQL injection : google : inurl:'liste.php?idFamille=' http://URL/liste.php?idFamille=120or201=1 http://URL/liste.php?idFamille=120or201=0...

[Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001

Blind SQL injection : check : inurl:'liste.php?idFamille=' http://URL/liste.php?idFamille=120or201=1 http://url/liste.php?idFamille=120or201=1 http://URL/liste.php?idFamille=120or201=0 http://url/liste.php?idFamille=120or201=0...