Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

3093 matches found

Prion
Prion•added 2007/08/01 4:17 p.m.•23 views

Sql injection

Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the 1 EmailAdd Username and 2 Pass password parameters. NOTE: some of these details are...

10CVSS9.2AI score0.02186EPSS
SaveExploits1References6
NVD
NVD•added 2007/08/01 4:17 p.m.•22 views

CVE-2007-4121

Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the 1 EmailAdd Username and 2 Pass password parameters. NOTE: some of these details are...

10CVSS8.5AI score0.02186EPSS
SaveExploits1References6
Cvelist
Cvelist•added 2007/08/01 4:00 p.m.•27 views

CVE-2007-4121

Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the 1 EmailAdd Username and 2 Pass password parameters. NOTE: some of these details are...

8.5AI score0.02186EPSS
SaveExploits1References6
CVE
CVE•added 2007/08/01 4:00 p.m.•57 views

CVE-2007-4121

CVE-2007-4121 relates to multiple SQL injection flaws in admin.aspx across three scripts: E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script. The vulnerability allows remote attackers to inject SQL via the EmailAdd (Username) and Pass (password) parameters, po...

10CVSS8.5AI score0.02186EPSS
SaveExploits1References6Affected Software3
securityvulns
securityvulns•added 2007/07/31 12:00 a.m.•47 views

E-commerceScripts ALL Apps (Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script) admin.aspx SQL

A R I A - S E C U R I T Y Vendor: http://www.e-commercescripts.com/dotnet/ E-commerceScripts ALL Apps Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script admin.aspx SQL Injection Username: anything' OR 'x'='x password: whatever you want or anything' OR 'x'='x Credits: Aria-Securit...

0.3AI score
SaveExploits0
securityvulns
securityvulns•added 2007/07/13 12:00 a.m.•75 views

osCommerce Online Merchant v2.2 RC1 local include bug

osCommerce Online Merchant v2.2 RC1 local include bug SEVERITY: ========= Normal SOFTWARE: ========= osCommerce Online Merchant v2.2 RC1 http://oscommerce.com/ INFO: ===== osCommerce is an Open Source based online shop e-commerce solution that is available for free under the GNU General Public...

7AI score
SaveExploits0
securityvulns
securityvulns•added 2007/05/26 12:00 a.m.•78 views

Vulnerability - cpCommerce - XSS

cpcommerce is a FOSS php-based e-commerce shopping cart web application. Exploit: Javascript placed inside a user's "Full Name:" field will not be stripped - it will be added to the database 'as-is' as long as it has no quotations in the string. When the admin goes to the clients view page, the...

2.9AI score
SaveExploits0
Packet Storm
Packet Storm•added 2007/05/08 12:00 a.m.•25 views

miniwebshop2-xss.txt

-=--------------------ADVISORY-------------------=- Mini Web Shop V.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Mini Web Shop -=+ Version: 2 -=+ Vendor's URL: http://obiewebsite.sourceforge.net/o.php?MiniWebShop -=+ Platform:...

7.4AI score
SaveExploits0
securityvulns
securityvulns•added 2007/05/07 12:00 a.m.•65 views

[Full-disclosure] Mini Web Shop v.2 vulnerable to XSS

-=--------------------ADVISORY-------------------=- Mini Web Shop V.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Mini Web Shop -=+ Version: 2 -=+ Vendor's URL: http://obiewebsite.sourceforge.net/o.php?MiniWebShop -=+ Platform:...

0.3AI score
SaveExploits0
Packet Storm
Packet Storm•added 2007/03/20 12:00 a.m.•30 views

Echo Security Advisory 2007.76

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability...

0.4AI score
SaveExploits0
seebug.org
seebug.org•added 2007/03/16 12:00 a.m.•36 views

Company WebSite Builder PRO 1.9.8 (INCLUDE_PATH) RFI Vulnerability

No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB•added 2007/03/15 12:00 a.m.•44 views

Company WebSite Builder PRO 1.9.8 - 'INCLUDE_PATH' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability...

6.8CVSS5.8AI score0.03466EPSS
SaveExploits1
zdt
zdt•added 2007/03/15 12:00 a.m.•45 views

Company WebSite Builder PRO 1.9.8 (INCLUDE_PATH) RFI Vulnerability

Exploit for unknown platform in category web applications ================================================================== Company WebSite Builder PRO 1.9.8 INCLUDEPATH RFI Vulnerability ================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y...

7.1AI score
SaveExploits0
Prion
Prion•added 2007/03/13 1:19 a.m.•19 views

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to include/includetop.php and certain other PHP scripts...

9.3CVSS8.1AI score0.03998EPSS
SaveExploits1References5Affected Software1
NVD
NVD•added 2007/03/13 1:19 a.m.•20 views

CVE-2007-1423

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to include/includetop.php and certain other PHP scripts...

9.3CVSS7.6AI score0.03998EPSS
SaveExploits1References5
Cvelist
Cvelist•added 2007/03/13 1:00 a.m.•34 views

CVE-2007-1423

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to include/includetop.php and certain other PHP scripts...

7.6AI score0.03998EPSS
SaveExploits1References5
CVE
CVE•added 2007/03/13 1:00 a.m.•64 views

CVE-2007-1423

The CVE-2007-1423 entry concerns multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier. The root cause is that the g_include parameter used by include/include_top.php (and certain other PHP scripts) can be manipulated to cause local/remote file inclusion, ...

9.3CVSS7.6AI score0.03998EPSS
SaveExploits1References5Affected Software1
seebug.org
seebug.org•added 2007/03/12 12:00 a.m.•64 views

WORK system e-commerce <= 3.0.5 Remote File Inclusion Vulnerability

No description provided by source. Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...

7.1AI score
SaveExploits0
zdt
zdt•added 2007/03/10 12:00 a.m.•34 views

WORK system e-commerce <= 3.0.5 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== WORK system e-commerce = 3.0.5 Remote File Inclusion Vulnerability =================================================================== Rodrigo Duarte WORK system e-commerc...

7.1AI score
SaveExploits0
exploitpack
exploitpack•added 2007/03/10 12:00 a.m.•30 views

work system E-Commerce 3.0.5 - Remote File Inclusion

work system E-Commerce 3.0.5 - Remote File Inclusion Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...

0.2AI score
SaveExploits0
Rows per page
Query Builder