PayPal Shipping Cross Site Scripting

Document Title: =============== Paypal Inc Bug Bounty 104 - Persistent Exception Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1038 PayPal Security UID: gJ1127yy Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID:...

Paypal Inc BB #104 - Persistent Exception Vulnerability

Document Title: =============== Paypal Inc BB 104 - Persistent Exception Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1038 PayPal Security UID: gJ1127yy Release Date: ============= 2013-10-25 Vulnerability Laboratory ID VL-ID:...

PayPal Mail Encoding Script Insertion

Document Title: =============== PayPal Inc Bug Bounty 61 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=846 PayPal Security UID: bzbe1he Release Date: ============= 2013-10-16 Vulnerability Laboratory ID VL-ID:...

Paypal Inc #105 MOS - Multiple Print Layout Vulnerabilities

Document Title: =============== Paypal Inc 105 MOS - Multiple Print Layout Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1039 PayPal Security UID: xE1128lV Release Date: ============= 2013-10-14 Vulnerability Laboratory ID VL-ID:...

AspxCommerce 2.0 - Arbitrary File Upload

AspxCommerce 2.0 - Arbitrary File Upload Exploit Title: AspxCommerce v2.0 - Arbitrary File Upload Vulnerability Exploit Author: SANTHO Vendor Homepage: http://www.aspxcommerce.com/ Version: Version 2.0 and below Introduction: AspxCommerce is a complete e-Commerce solution for setting up a fully...

Paypal BBP #99 - Filter Bypass & Persistent Vulnerability

Document Title: =============== Paypal BBP 99 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=984 PayPal Security UID: nj1071UU Release Date: ============= 2013-09-18 Vulnerability Laboratory ID VL-ID:...

Prestashop v1.5.5 - CRLF Injection Vulnerability

Prestashop version 1.5.5 suffers from a CRLF injection vulnerability that allows for addition of headers. Exploit Title: Prestashop v1.5.5 - CRLF Injection Vulnerability Official site: http://www.prestashop.com Official Demo : http://demo-store.prestashop.com/ Risk Level: Medium Exploit Author:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the SilverStripe e-commerce module 3.0 for SilverStripe CMS allow remote attackers to inject arbitrary web script or HTML via the 1 FirstName, 2 Surname, or 3 Email parameter to code/forms/OrderFormAddress.php; or the 4 FirstName or 5 Surname...

CVE-2012-6458

Multiple cross-site scripting XSS vulnerabilities in the SilverStripe e-commerce module 3.0 for SilverStripe CMS allow remote attackers to inject arbitrary web script or HTML via the 1 FirstName, 2 Surname, or 3 Email parameter to code/forms/OrderFormAddress.php; or the 4 FirstName or 5 Surname...

CVE-2012-6458

Multiple cross-site scripting (XSS) vulnerabilities affect the SilverStripe e-commerce module 3.0 for SilverStripe CMS, allowing remote attackers to inject arbitrary web script or HTML via parameters in code/forms/OrderFormAddress.php (FirstName, Surname, Email) or code/forms/ShopAccountForm.php ...

PT-2013-1951

Name of the Vulnerable Software and Affected Versions SilverStripe e-commerce module version 3.0 for SilverStripe CMS Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including FirstName, Surname, and Email to...

CVE-2012-6458: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the SilverStripe e-commerce module 3.0 for SilverStripe CMS allow remote attackers to inject arbitrary web script or HTML via the 1 FirstName, 2 Surname, or 3 Email parameter to code/forms/OrderFormAddress.php; or the 4 FirstName or 5 Surname...

Online payment logic vulnerabilities summary-vulnerability warning-the black bar safety net

0×0 0 background description With Internet users increasingly accustomed to Online Shopping, there has been more and more e-Commerce sites, the online trading platform. Which certainly relates to the online payment process, and there is also a lot of logic. Since this involves money, if poorly...

Disaster date: the Internet in China was tragically Struts2 high-risk vulnerabilities-torn-vulnerability warning-the black bar safety net

Struts is the Apache Foundation's Jakarta project team an open source project, Struts by using Java Servlet/JSP technology, the Java EE-based Web applications Model-View-Controller（MVC design pattern application framework, MVC is a classic design pattern in a classic product. Currently, the Strut...

Paypal BugBounty #13 - Mail Encoding Web Vulnerability

Document Title: =============== Paypal BugBounty 13 - Mail Encoding Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=650 PayPal Security UID: cga1a7oh Release Date: ============= 2013-06-17 Vulnerability Laboratory ID VL-ID:...

Paypal BugBounty #13 - Mail Encoding Web Vulnerability

Document Title: =============== Paypal BugBounty 13 - Mail Encoding Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=650 PayPal Security UID: cga1a7oh Release Date: ============= 2013-06-17 Vulnerability Laboratory ID VL-ID:...

Paypal Bug Bounty #12 - PPM Listing Vulnerability

Document Title: =============== Paypal Bug Bounty 12 - PPM Listing Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=649 Release Date: ============= 2013-05-30 Vulnerability Laboratory ID VL-ID: ==================================== 649 Common...

UK banks hit by Ramnit banking malware and social engineering attacks

A dangerous variant of the Ramnit malware has been discovered targeting the UK's financial sector. Trusteer claims to have discovered an interesting trojan based attack technique that injects highly convincing and interactive real-time messages into the user Web stream that they encounter when...

Paypal Bug Bounty #6 - Persistent Web Vulnerability

Document Title: =============== Paypal Bug Bounty 6 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=645 PayPal Security UID: ydh14ayfu Release Date: ============= 2013-03-27 Vulnerability Laboratory ID VL-ID:...

Paypal Bug Bounty #6 - Persistent Web Vulnerability

Document Title: =============== Paypal Bug Bounty 6 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=645 PayPal Security UID: ydh14ayfu Release Date: ============= 2013-03-27 Vulnerability Laboratory ID VL-ID:...