901 matches found
CVE-2006-6534
Multiple cross-site scripting XSS vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the 1 set parameter to admin/modules.php, the 2 selectedbox parameter to definitiva/admin/customers.php, the 3 lID parameter to admin/languagesdefinitions.php, o...
CVE-2006-6533: Undefined Security Weakness
Directory traversal vulnerability in admin/templatesboxeslayout.php in osCommerce 3.0a3 allows remote attackers to include and execute arbitrary PHP files via a .. dot dot in the filter parameter. NOTE: this issue can be leveraged to obtain full path information in error messages...
CVE-2006-6534: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the 1 set parameter to admin/modules.php, the 2 selectedbox parameter to definitiva/admin/customers.php, the 3 lID parameter to admin/languagesdefinitions.php, o...
osc303.txt
Oscommerce traversal arbitrary file access Vendor:http://www.oscommerce.com/about/news,125 Advisore:http://lostmon.blogspot.com/2006/12 /oscommerce-traversal-arbitrary-file.html Vendor notify:NO Exploit available: YES osCommerce contains a flaw that allows a remote traversal arbitrary file...
oscommerce-xss.txt
Oscommerce Multiple XSS in admin section. Vendor url:Http://www.oscommerce.com Advisore:http://lostmon.blogspot.com/2006/11/ oscommerce-multiple-xss-in-admin.html Vendor notify:YES Exploit available: YES osCommerce contains a flaw that allows a remote cross site scripting attack.This flaw exists...
Re: Multiple XSS Vulnerabilities in Zen Cart 1.3.5
Full Disclosure Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0003 Status: Full Date: 2006/9/27 Summary: Armorize-ADV-2006-0003 discloses multiple cross-site scripting vulnerabilities that are found in Zen Cart, which is a PHP e-commerce shopping program and is Built on a...
CVE-2006-5190
Multiple cross-site scripting XSS vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in the a bannermanager.php, b bannerstatistics.php, c countries.php, d currencies.php, e languages.php, f...
CVE-2006-5190
Multiple cross-site scripting XSS vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in the a bannermanager.php, b bannerstatistics.php, c countries.php, d currencies.php, e languages.php, f...
CVE-2006-5190
CVE-2006-5190 affects osCommerce 2.2 Milestone 2 Update 060817. The vulnerability is a set of multiple XSS flaws exploitable through the page parameter in admin scripts (banner_manager.php, banner_statistics.php, countries.php, currencies.php, languages.php, manufacturers.php, newsletters.php, or...
CVE-2006-5190: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in the a bannermanager.php, b bannerstatistics.php, c countries.php, d currencies.php, e languages.php, f...
osCommerce 2.2 - adminstats_products_purchased.php?page Cross-Site Scripting
osCommerce 2.2 - adminstatsproductspurchased.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
osCommerce 2.2 - adminmanufacturers.php?page Cross-Site Scripting
osCommerce 2.2 - adminmanufacturers.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...
osCommerce 2.2 - adminreviews.php?page Cross-Site Scripting
osCommerce 2.2 - adminreviews.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user i...
osCommerce 2.2 - adminnewsletters.php?page Cross-Site Scripting
osCommerce 2.2 - adminnewsletters.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting us...
osCommerce 2.2 - '/admin/manufacturers.php?page' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...
osCommerce 2.2 - '/admin/banner_statistics.php?page' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...
osCommerce 2.2 - '/admin/currencies.php?page' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...
osCommerce 2.2 - '/admin/languages.php?page' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...
osCommerce 2.2 - '/admin/stats_products_viewed.php?page' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...
osCommerce 2.2 - '/admin/products_expected.php?page' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...