3047 matches found
Vulnerability - cpCommerce - XSS
cpcommerce is a FOSS php-based e-commerce shopping cart web application. Exploit: Javascript placed inside a user's "Full Name:" field will not be stripped - it will be added to the database 'as-is' as long as it has no quotations in the string. When the admin goes to the clients view page, the...
miniwebshop2-xss.txt
-=--------------------ADVISORY-------------------=- Mini Web Shop V.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Mini Web Shop -=+ Version: 2 -=+ Vendor's URL: http://obiewebsite.sourceforge.net/o.php?MiniWebShop -=+ Platform:...
[Full-disclosure] Mini Web Shop v.2 vulnerable to XSS
-=--------------------ADVISORY-------------------=- Mini Web Shop V.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Mini Web Shop -=+ Version: 2 -=+ Vendor's URL: http://obiewebsite.sourceforge.net/o.php?MiniWebShop -=+ Platform:...
Echo Security Advisory 2007.76
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability...
Company WebSite Builder PRO 1.9.8 (INCLUDE_PATH) RFI Vulnerability
No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion...
Company WebSite Builder PRO 1.9.8 - 'INCLUDE_PATH' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability...
Company WebSite Builder PRO 1.9.8 (INCLUDE_PATH) RFI Vulnerability
Exploit for unknown platform in category web applications ================================================================== Company WebSite Builder PRO 1.9.8 INCLUDEPATH RFI Vulnerability ================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to include/includetop.php and certain other PHP scripts...
CVE-2007-1423
Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to include/includetop.php and certain other PHP scripts...
CVE-2007-1423
Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to include/includetop.php and certain other PHP scripts...
CVE-2007-1423
The CVE-2007-1423 entry concerns multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier. The root cause is that the g_include parameter used by include/include_top.php (and certain other PHP scripts) can be manipulated to cause local/remote file inclusion, ...
WORK system e-commerce <= 3.0.5 Remote File Inclusion Vulnerability
No description provided by source. Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...
WORK system e-commerce <= 3.0.5 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== WORK system e-commerce = 3.0.5 Remote File Inclusion Vulnerability =================================================================== Rodrigo Duarte WORK system e-commerc...
work system E-Commerce 3.0.5 - Remote File Inclusion
work system E-Commerce 3.0.5 - Remote File Inclusion Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...
work system E-Commerce 3.0.5 - Remote File Inclusion
Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo, link,partner,forum,new,FAQ,event,calendar,invoice,mailing,supplier,RSS,...
shopstorenow-sql.txt
============================= HItamputih Crew ==================== hitamputih Advisory Discovered By : IbnuSina ----------------------------------------------------------- Software: shopstorenow E-commerce Shopping Cart Method: SQL Injection...
Sql injection
SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
CVE-2007-0142
SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
CVE-2007-0142
CVE-2007-0142 describes a SQL injection in orange.asp of ShopStoreNow E-commerce Shopping Cart, exploitable via the CatID parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry lists base metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P, base score 7.5 (HIGH). Th...