166 matches found
CVE-2009-0328
CVE-2009-0328 affects ROBS-PROJECTS Digital Sales IPN (also DS-IPN.NET/DS-IPN Paypal Shop). The issue is insufficient access control that allows remote attackers to directly download the database file (Database/Sales.mdb) from the web root, exposing user credentials. This has been captured in mul...
DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability
No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
CVE-2008-5568
Cross-site request forgery CSRF vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the adminid, newpass1, and newpass2 parameters...
CVE-2008-5568
Cross-site request forgery CSRF vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the adminid, newpass1, and newpass2 parameters...
CVE-2008-5568
The CVE-2008-5568 entry describes a CSRF vulnerability in IPN Pro 3 (version 1.44 and earlier) affecting admin/settings.php. An attacker could change the admin password by exploiting a logout action using the admin_id, newpass_1, and newpass_2 parameters. The public technical details in the conne...