Drupal CMS v7.5.x - Multiple Web Vulnerabilities

Document Title: =============== Drupal CMS v7.5.x - Multiple Web Vulnerabilities References Source: ==================== Released on the german ePost Security Cup http://www.deutschepost.de/dpag?lang=deEN&xmlFile=link10227921022790 Release Date: ============= 2011-09-17 Vulnerability Laboratory I...

WordPress WP e-Commerce 3.8.6 SQL Injection

Exploit Title: WordPress WP e-Commerce plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23&cs3=123f7bcd4ba53fade05886a7e77bf045&transactiontype=rebill e.g. !/bin/bash payload="-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" hash=echo -n $payload | md5sum | tr -d '\n' | se...

WordPress e-Commerce Plugin <= 3.8.6 - SQL Injection

This WordPress e-Commerce plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin E-Commerce 3.8.6 - SQL Injection

WordPress Plugin E-Commerce 3.8.6 - SQL Injection Exploit Title: WordPress WP e-Commerce plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23&cs3=123f7bcd4ba53fade05886a7e77bf045&transactiontype=rebill e.g. !/bin/bash payload="-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0...

WordPress WP e-Commerce plugin <= 3.8.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress WP e-Commerce plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23&cs3=123f7bcd4ba53fade05886a7e77bf045&transactiontype=rebill e.g. !/bin/bash payload="-1 AND...

JOT Online Store SQL Injection

Exploit Title: JOT Online Store E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.justonlinetoday.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Vulnerable Page: index.php Example:...

Yaxal Shop Cross Site Scripting

Exploit Title: Yaxal Shop E-Commerce System Stored XSS Date: 2011 Author: Eyup CELIK Software Link: http://www.polyspaston.com/contentshopdirector.php Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page:...

JSS-Shop SQL Injection

Exploit Title: JSS-Shop E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example cart.php?pid=&todo=add Exploit:...

Bonza Digital Cart SQL Injection

Exploit Title: Bonzo Cart E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example...

Built2Go Shopping Blind SQL Injection

Exploit Title: Built2Go Shopping E-Commerce System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Blind SQL Injection can be done using the command input Vulnerable Page: search.php product.php Example:...

DV Cart Shopping Cart software SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: DV Cart E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.esmistudio.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the comman...

DV Cart Shopping Cart software - SQL Injection

DV Cart Shopping Cart software - SQL Injection Exploit Title: DV Cart E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.esmistudio.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input...

Bonza Digital Cart Script - SQL Injection

Bonza Digital Cart Script - SQL Injection Exploit Title: Bonzo Cart E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input...

Bonza Digital Cart Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Bonzo Cart E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the comma...

ShopDirector SQL Injection

Exploit Title: ShopDirector E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.polyspaston.com/contentshopdirector.php Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Vulnerable Page:...

CK Cart SQL Injection

Exploit Title: CK Cart E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.ckcart.com/ Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Vulnerable Page: cart.php Example:...

Bonza Digital Cart Script - SQL Injection

Exploit Title: Bonzo Cart E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example...

DV Cart Shopping Cart software - SQL Injection

Exploit Title: DV Cart E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.esmistudio.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example index.php?keyword=&mod=search&submit=G...

DV Cart SQL Injection

Exploit Title: DV Cart E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.esmistudio.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example index.php?keyword=&mod=search&submit=G...

Axis Commerce (E-Commerce System) Stored XSS

Exploit for php platform in category web applications Exploit Title: Axis Commerce E-Commerce System Stored XSS Date: 19.08.2011 Author: Eyup CELIK Software Link: https://github.com/downloads/axis/axiscommerce/axis-0.8.1.zip Version: 0.8.1 and previus Tested on: Apache For Windows ISSUE Vulnerabl...