osCommerce <= 2.2 (extras) Source Code Disclosure Vulnerability

No description provided by source. ---- osCommerce = 2.2 "extras/" information/source code disclosure ------------ software site: http://www.oscommerce.com/ if extras/ folder is placed inside the www path, you can see all files on target system, including php source code with database details, po...

osCommerce 2.2 - extras Source Code Disclosure

osCommerce 2.2 - extras Source Code Disclosure ---- osCommerce \n"; print nl2brhtmlentitiesimplode$readme, ' '; print "Continue\n"; print "\n"; exit; ... google search: inurl:"extras/update.php" intext:mysql.php -display...

osCommerce 2.2 - 'extras' Source Code Disclosure

---- osCommerce \n"; print nl2brhtmlentitiesimplode$readme, ' '; print "Continue\n"; print "\n"; exit; ... google search: inurl:"extras/update.php" intext:mysql.php -display -------------------------------------------------------------------------------- rgod site: http://retrogod.altervista.org...

CVE-2005-4677

The CVE-2005-4677 entry describes a SQL injection vulnerability in the osCommerce Additional Images module (additional_images.php) before version 1.14. The flaw allows remote attackers to inject arbitrary SQL via the products_id parameter to product_info.php, enabling potentially unauthorized dat...

CVE-2005-4677

SQL injection vulnerability in additionalimages.php aka the Additional Images module before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the productsid parameter to productinfo.php...

CVE-2005-4677: Undefined Security Weakness

SQL injection vulnerability in additionalimages.php aka the Additional Images module before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the productsid parameter to productinfo.php...

Hardcoded credentials

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

CVE-2006-0478

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

CVE-2005-4677

SQL injection vulnerability in additionalimages.php aka the Additional Images module before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the productsid parameter to productinfo.php...

bug in oscomerce

Advisory 2 Title: file Modification in osCommerce Author: 0ozeuso0 Contact: [email protected] Website: olimpusklan.org Date: 27/12/2005 Risk: High Vendor Url: http://www.oscommerce.com/ Affected Software: osCommerce Non Affected: We Are: Olimpus KlaN TECHNICAL INFO...

SQL

Hello vuln, SQL Injection in OsCommerce: ex: http://./index.php?cPath=23105&page=1&sort=-1a or http://./index.php?cPath=23105&page=1&sort='2a ----- -- Best regards, t3rr4n mailto:[email protected]...

CVE-2004-2638

The CVE-2004-2638 vulnerability affects osCommerce 1.5.1 via the Admin Access With Levels plugin. The issue allows remote attackers to access files in the admin/ directory by setting in_login to a non-zero value, enabling partial confidentiality and integrity impact. No exploitation details or sp...

CVE-2004-2638

The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the inlogin parameter to a non-zero value...

CVE-2004-2638: Undefined Security Weakness

The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the inlogin parameter to a non-zero value...

osCommerce Cross Site Scripting Bugs

osCommerce is a widely installed open source shopping e-commerce solution. An attacker may use it to perform a cross site scripting attack on this host. OpenVAS Vulnerability Test $Id: osCommercexss.nasl 9087 2018-03-12 17:24:24Z cfischer $ Description: osCommerce Cross Site Scripting Bugs Author...

osCommerce Malformed Session ID XSS Vulnerability

osCommerce is vulnerable to an XSS flaw. The flaw can be exploited when a malicious user passes a malformed session ID to URI. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

osCommerce Malformed Session ID XSS Vulnerability

osCommerce is an online shop e-commerce solution under on going development by the open source community. Its feature packed out-of-the-box installation allows store owners to setup, run, and maintain their online stores with minimum effort and with absolutely no costs or license fees involved...

File Disclosure in osCommerce

There is a vulnerability in the osCommerce's File Manager that allows an attacker to retrieve arbitrary files from the webserver that reside outside the bounding HTML root directory. OpenVAS Vulnerability Test $Id: oscommercefilemanagerdisclosure.nasl 6053 2017-05-01 09:02:51Z teissa $ Descriptio...

osCommerce directory traversal

The remote host is running osCommerce, a widely installed open source shopping e-commerce solution. The remote version of this software is vulnerable to a directory traversal flaw which may be exploited by an attacker to read arbitrary files on the remote server with the privileges of the web...

osCommerce Directory Traversal Vulnerability

osCommerce is vulnerable to a directory traversal flaw which may be exploited by an attacker to read arbitrary files on the remote server with the privileges of the web server. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are...