238 matches found
AShop Deluxe 4.x - catalogue.php SQL Injection
AShop Deluxe 4.x - catalogue.php SQL Injection usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; use URI::Escape; -------------------------------------------------------------------------------------------------------------------------------------------------------- x AShop...
AShop Deluxe 4.x (catalogue.php cat) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= AShop Deluxe 4.x catalogue.php cat Remote SQL Injection Exploit ================================================================= usr/bin/perl use LWP::UserAgent; use...
AShop Deluxe 4.x - 'catalogue.php' SQL Injection
usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; use URI::Escape; -------------------------------------------------------------------------------------------------------------------------------------------------------- x AShop Deluxe 4.x Remote SQL inJection Exploit x Ditemuk...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in adsense-deluxe.php in the AdSense-Deluxe 0.x plugin for WordPress allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors...
CVE-2007-2828
Cross-site request forgery CSRF vulnerability in adsense-deluxe.php in the AdSense-Deluxe 0.x plugin for WordPress allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors...
CVE-2007-2828
CVE-2007-2828: CSRF in the WordPress AdSense-Deluxe (0.x) plugin via adsense-deluxe.php. Allows remote attackers to perform actions as arbitrary users. Connected docs specify the affected plugin and CSRF risk but do not detail vectors or root cause beyond the CSRF class issue. Remediation: update...
CVE-2007-2828
Cross-site request forgery CSRF vulnerability in adsense-deluxe.php in the AdSense-Deluxe 0.x plugin for WordPress allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors...
WordPress AdSense Deluxe Plugin <= 0.9 - CSRF
Because of this vulnerability in adsense-deluxe.php, the attackers can perform unspecified actions as arbitrary users via unspecified vectors. Solution Update the plugin...
Directory traversal
Directory traversal vulnerability in includes/footer.php in News Manager Deluxe NMDeluxe 1.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...
CVE-2007-2303
Directory traversal vulnerability in includes/footer.php in News Manager Deluxe NMDeluxe 1.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...
Web Service Deluxe News Manager 1.0.1 Deluxe - 'footer.php' Local File Inclusion
source: https://www.securityfocus.com/bid/23499/info News Manager Deluxe is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. This issue affects News...
Web Service Deluxe News Manager 1.0.1 Deluxe - footer.php Local File Inclusion
Web Service Deluxe News Manager 1.0.1 Deluxe - footer.php Local File Inclusion source: https://www.securityfocus.com/bid/23499/info News Manager Deluxe is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an...
CVE-2007-0056
Multiple cross-site scripting XSS vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to a ashop/catalogue.php and b ashop/basket.php, the 2 exp parameter to ashop/catalogue.php, the 3 searchstrin...
CVE-2007-0056
CVE-2007-0056 covers multiple cross-site scripting (XSS) flaws in AShop Deluxe 4.5 and the AShop Administration Panel. The vulnerabilities allow remote attackers to inject arbitrary script/HTML through various inputs: cat in ashop/catalogue.php and ashop/basket.php; exp in ashop/catalogue.php; se...
CVE-2007-0056
Multiple cross-site scripting XSS vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to a ashop/catalogue.php and b ashop/basket.php, the 2 exp parameter to ashop/catalogue.php, the 3 searchstrin...
AShop Shopping Cart Multiple XSS Vulnerabilities
Ashop Commerce provides a turn-key ecommerce solution with it's revolutionary online store building software. One of the worlds most easy to use web based administrations with award winning features allows the merchant to set up an online store capable of competing with the webs most powerful...
AShop Deluxe 4.5 - basket.php Cross-Site Scripting
AShop Deluxe 4.5 - basket.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may...
AShop Deluxe 4.5 - search.php Cross-Site Scripting
AShop Deluxe 4.5 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may...
AShop Deluxe 4.5 - catalogue.php Cross-Site Scripting
AShop Deluxe 4.5 - catalogue.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may...
AShop Deluxe 4.5 - 'editcatalogue.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code...