3454 matches found
PayPal Inc BB #71 PPM - Persistent Filter Vulnerability
Document Title: =============== PayPal Inc BB 71 PPM - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=870 PayPal Security UID: Roc83bl Release Date: ============= 2014-09-24 Vulnerability Laboratory ID VL-ID:...
PayPal Inc BB #59 - Persistent Mail Encoding Vulnerability
Document Title: =============== PayPal Inc BB 59 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=844 PayPal Security UID: CabdfGa Release Date: ============= 2014-09-23 Vulnerability Laboratory ID VL-ID:...
PayPal Inc BB #59 - Persistent Mail Encoding Vulnerability
Document Title: =============== PayPal Inc BB 59 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=844 PayPal Security UID: CabdfGa Release Date: ============= 2014-09-23 Vulnerability Laboratory ID VL-ID:...
SA-CONTRIB-2014-085 - Ubercart - Information disclosure
The Ubercart module for Drupal provides a shopping cart and e-commerce features for Drupal. The per-user order history view is not properly protected. This vulnerability is mitigated by the fact that an attacker must have an account with the "view own orders" permission and can only view order ID...
Mulitple WordPress Themes (admin-ajax.php, img param) - Arbitrary File Download
No description provided by source. WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage: http://themeforest.net/item/cuckootap-one-page-parallax-wp-theme-plus-eshop/3512405...
CS-Cart 4.2.0 Session Hijacking Vulnerability
CS-Cart version 4.2.0 suffers from a session hijacking vulnerability due to weakly minted session identifiers. Vendor: CS-Cart Homepage: https://www.cs-cart.com Fixed in: v4.2.1 Released: July 22nd 2014 CS-Cart is 127MB of shitty PHP and HTML code that is supposed to function as a secure e-commer...
CS-Cart 4.2.0 Session Hijacking
Vendor: CS-Cart Homepage: https://www.cs-cart.com Fixed in: v4.2.1 Released: July 22nd 2014 CS-Cart is 127MB of shitty PHP and HTML code that is supposed to function as a secure e-commerce site. It is developed by people who don't reply to emails but who covertly patch bugs reported to them and...
Payment Gateways Caller for WP e-Commerce 0.1.0 - load_merchant Parameter Traversal Local file Inclusion
The Payment Gateways Caller for WP e-Commerce WordPress plugin was affected by a loadmerchant Parameter Traversal Local file Inclusion security vulnerability...
e-Commerce <= 3.4 - Arbitrary File Upload Exploit
The wp-shopping-cart WordPress plugin was affected by an Arbitrary File Upload Exploit security vulnerability...
Welcart e-Commerce 1.3.12 - purchase_limit Parameter DOM-based XSS
The Welcart e-Commerce WordPress plugin was affected by a purchaselimit Parameter DOM-based XSS security vulnerability...
Welcart e-Commerce 1.3.12 - SQL Injection
The Welcart e-Commerce WordPress plugin was affected by a SQL Injection security vulnerability...
Welcart e-Commerce 1.3.12 - DOM Cross-Site Scripting (XSS)
The Welcart e-Commerce WordPress plugin was affected by a DOM Cross-Site Scripting XSS security vulnerability...
Paypal BBP #108 MOS - Persistent Web Vulnerability
Document Title: =============== Paypal BBP 108 MOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1049 PayPal Security UID: qw115bSN Release Date: ============= 2014-07-08 Vulnerability Laboratory ID VL-ID:...
Happymall E-Commerce Software 4.3/4.4 Normal_HTML.CGI File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7559/info IT has been reported that Happymall E-Commerce is prone to a file disclosure vulnerability. The problem occurs due to insufficient sanitization of user-supplied URI parameters. As a result, it may be possible fo...
pre multi-vendor shopping malls Multiple Vulnerabilities
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Pre...
work system e-commerce <= 3.0.5 - Remote File Inclusion Vulnerability
No description provided by source. Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...
ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability
No description provided by source. ?php / ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability Vendor: ViArt Software Product web page: http://www.viart.com Affected version: 4.1, 4.0.8, 4.0.5 Summary: Viart Shop is a PHP based e-commerce suite, aiming to provide everything you nee...
Axis Commerce (E-Commerce System) Stored XSS
No description provided by source. Exploit Title: Axis Commerce E-Commerce System Stored XSS Date: 19.08.2011 Author: Eyup CELIK Software Link: https://github.com/downloads/axis/axiscommerce/axis-0.8.1.zip Version: 0.8.1 and previus Tested on: Apache For Windows ISSUE Vulnerable Modules = Search...
Wordpress iMember360 Plugin 3.8.012 - 3.9.001 - Multiple Vulnerabilities
No description provided by source. ------------ BACKGROUND ------------ iMember360is a WordPress plugin that will turn a normal WordPress site into a full featured membership site. It includes all the protection controls you can imagine, yet driven by Infusionsoft's second-to-none CRM and...
Bonza Digital Cart Script SQL Injection Vulnerability
No description provided by source. Exploit Title: Bonzo Cart E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example...