952 matches found
123tkShop 0.9.1 - Remote Authentication Bypass Vulnerability
No description provided by source. By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...
K&S Shopsysteme Arbitrary Remote File Upload Vulnerability
No description provided by source. Script Name: Shopsysteme new version oscommerce Download: http://www.shopsystem-forum.de/productinfo.php?cPath=22&productsid=43 299 euro : Author: mNt File Upload Bug Google Dork: intext:Powered by K&S Media Concept - Shopsysteme Powered by K&S Media Concept -...
OSCommerce 2.2 Update.PHP Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14294/info osCommerce is prone to an information-disclosure vulnerability. An attacker could exploit this vulnerability to display the contents of any file normally readable by the webserver process. Successful exploitati...
osCommerce 2.2 - CSRF
No description provided by source. Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2 Tested on: Mac OS X 10.6.4, osCommerce v2.2 RC2A Dutch This is the code that you can execute to change the admin pass:...
Allpc 2.5 osCommerce SQL/XSS Multiple Vulnerabilities
No description provided by source. +Title Allpc 2.5 osCommerce SQL-i/XSS Multiple Vulnerabilities +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking...
osCommerce 3.0a5 Local File Include and HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/39820/info osCommerce is prone to a local file-include vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include...
osCommerce 2.x File Manager Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10364/info osCommerce has a directory-traversal vulnerability that allows a remote attacker to possibly obtain sensitive information. The software improperly sanitizes user-supplied input and allows '../'...
EZ-Oscommerce 3.1 - Remote File Upload
No description provided by source. !/usr/bin/env python coding: utf-8 import string import random from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register from pocsuite.lib.utils.webshell import PhpVerify, PhpShell from pocsuite.lib.utils.password...
osCommerce 2.1/2.2 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29055/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...
OsCommerce 2.1/2.2 Product_info.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19774/info osCommerce is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access ...
OSCommerce 3.0.2 - Persistent Cross Site Vulnerability
No description provided by source. Title: ====== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability Date: ===== 2012-02-02 VL-ID: ===== 407 Introduction: ============= osCommerce is the leading Open Source online shop e-commerce solution that is available for free under the GNU General Publi...
osCommerce 2.2 admin/currencies.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
osCommerce 2.2 admin/banner_statistics.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
osCommerce 2.2 admin/manufacturers.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
osCommerce 2.2 admin/products_attributes.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
osCommerce 2.2 admin/products_expected.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
osCommerce 2.2 admin/languages.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
osCommerce 2.2 admin/reviews.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
osCommerce 2.2 admin/stats_products_purchased.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
osCommerce 2.2 admin/stats_products_viewed.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...