952 matches found
Sql injection
SQL injection vulnerability in the updatezone function in catalog/admin/geozones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote administrators to execute arbitrary SQL commands via the zID parameter in a list action...
CVE-2014-10033
SQL injection vulnerability in the updatezone function in catalog/admin/geozones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote administrators to execute arbitrary SQL commands via the zID parameter in a list action...
CVE-2014-10033
The CVE-2014-10033 entry describes an SQL injection in the update_zone function of osCommerce Online Merchant 2.3.3.4 and earlier. The vulnerability exists in catalog/admin/geo_zones.php, where remote administrators can trigger arbitrary SQL execution via the zID parameter in a list action. The i...
CVE-2014-10033
SQL injection vulnerability in the updatezone function in catalog/admin/geozones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote administrators to execute arbitrary SQL commands via the zID parameter in a list action...
CVE-2014-10033: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the updatezone function in catalog/admin/geozones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote administrators to execute arbitrary SQL commands via the zID parameter in a list action...
PT-2015-3677
Name of the Vulnerable Software and Affected Versions osCommerce Online Merchant versions 2.3.3.4 and earlier Description The issue allows remote administrators to execute arbitrary SQL commands. This is achieved via the zID parameter in a list action, specifically targeting the update zone...
Oscommerce 2.3.4 XSS / HPP / File Inclusion
Oscommerce2.3.4 multi Vulnerability 0-Day ========================================= Author : indoushka Vondor : http://www.oscommerce.com/ Dork : Powered by osCommerce ========================================= File inclusion : It seems that this script includes a file which name is determined usi...
osCommerce 2.3.4 - Multiple vulnerabilities
No description provided by source. Title: osCommerce 2.3.4 - Multiple vulnerabilities Date: 10.07.14 Affected versions: = 2.3.4 latest atm Vendor: oscommerce.com Tested on: Apache 2.2.22 at Debian Contact: smash at devilteam.pl Cross Site Scripting 1. Reflected XSS - Send Email Vulnerable...
osCommerce 2.3.4 - Multiple Vulnerabilities
osCommerce 2.3.4 - Multiple Vulnerabilities Title: osCommerce 2.3.4 - Multiple vulnerabilities Date: 10.07.14 Affected versions: = 2.3.4 latest atm Vendor: oscommerce.com Tested on: Apache 2.2.22 at Debian Contact: smash at devilteam.pl Cross Site Scripting 1. Reflected XSS - Send Email Vulnerabl...
osCommerce 2.3.4 - Multiple Vulnerabilities
Title: osCommerce 2.3.4 - Multiple vulnerabilities Date: 10.07.14 Affected versions: = 2.3.4 latest atm Vendor: oscommerce.com Tested on: Apache 2.2.22 at Debian Contact: smash at devilteam.pl Cross Site Scripting 1. Reflected XSS - Send Email Vulnerable parameters - customersemailaddress &...
osCommerce 2.3.4 - Multiple vulnerabilities
Latest osCommerce software suffers on multiple cross site scripting and cross site request forgery vulnerabilities, which even may lead to remote code execution. Title: osCommerce 2.3.4 - Multiple vulnerabilities Date: 10.07.14 Affected versions: = 2.3.4 latest atm Vendor: oscommerce.com Tested o...
osCommerce 2.2 admin/orders_status.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
osCommerce Addon Customer Testimonials 3.1 - SQL Injection Vulnerability
No description provided by source. osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:customertestimonials.php Exploit:...
osCommerce 2.3.3.4 - (geo_zones.php, zID param) - SQL Injection Vulnerability
No description provided by source. Title: osCommerce v2.x SQL Injection Vulnerability Dork: Powered by osCommerce Author: Ahmed Aboul-Ela Contact: ahmed.aboul3laatgmaildotcom - http://twitter.com/secgeek Vendor : http://www.oscommerce.com Version: v2.3.3.4 current latest release and prior version...
OSCommerce 2.2 Product_Info.PHP Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7351/info It has been reported that an attacker may trigger a denial of service condition in osCommerce application. If malicious URI parameters are passed to several of the osCommerce PHP pages, the mySQL and web server...
osCommerce 2.2 admin/tax_rates.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
oscommerce <= 2.2rc2a Bypass/Create and Download Backup Vulnerability
No description provided by source. ======================================================================================== $ | Title : osCommerce online SHop Backup Vulnerability $ | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
osCommerce 2.3.1 (banner_manager.php) Remote File Upload Vulnerability
No description provided by source. Exploit Title: OSC 2.3.1: Remote File Upload Vulnerability : Banner Manager Google Dork: powered by oscommerce we will automatically add these to the GHDB Date: 13-05-2011 Author: Number 7 Software Link: http://www.oscommerce.com/ext/oscommerce-2.3.1.zip Version...
oscommerce authentication bypass
No description provided by source. This is a bug on old oscommerce / creloaded i just didn't find it in the exploit-db database on the search. Exploit Title: OsCommerce/Creloaded tell a friend authentication bypass Date: 04/02/2010 Author: Nicolas Krassas Version: $Id: tellafriend.php,v 1.1.1.1...
OSCommerce 2.2 Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7357/info osCommerce has been reported prone to authentication bypass vulnerability. It has been reported that osCommerce uses HTTP header information as a part of its authentication mechanism. Reportedly an attacker may...