952 matches found
Directory traversal
Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfglanguage parameter. NOTE: this issue has been disputed by CVE, since the cfglanguage variable is configured upon...
CVE-2007-1477
Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfglanguage parameter. NOTE: this issue has been disputed by CVE, since the cfglanguage variable is configured upon...
CVE-2007-1477
Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfglanguage parameter. NOTE: this issue has been disputed by CVE, since the cfglanguage variable is configured upon...
CVE-2007-1477
CVE-2007-1477 affects PHP Point Of Sale for osCommerce v1.1. The vulnerability is a directory traversal in the index.php file, exploitable via a ".." sequence in the cfg_language parameter, allowing remote attackers to include and execute local files. Documentation notes that the issue has been d...
PT-2007-2871 · Oscommerce · Php Point Of Sale For Oscommerce
Name of the Vulnerable Software and Affected Versions: PHP Point Of Sale for osCommerce version 1.1 Description: The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfg language parameter in index.php. However, it's noted that this issue has been...
CVE-2007-1477: Undefined Security Weakness
Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfglanguage parameter. NOTE: this issue has been disputed by CVE, since the cfglanguage variable is configured upon...
CVE-2006-6534
Multiple cross-site scripting XSS vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the 1 set parameter to admin/modules.php, the 2 selectedbox parameter to definitiva/admin/customers.php, the 3 lID parameter to admin/languagesdefinitions.php, o...
CVE-2006-6533
Directory traversal vulnerability in admin/templatesboxeslayout.php in osCommerce 3.0a3 allows remote attackers to include and execute arbitrary PHP files via a .. dot dot in the filter parameter. NOTE: this issue can be leveraged to obtain full path information in error messages...
CVE-2006-6533
Directory traversal vulnerability in admin/templatesboxeslayout.php in osCommerce 3.0a3 allows remote attackers to include and execute arbitrary PHP files via a .. dot dot in the filter parameter. NOTE: this issue can be leveraged to obtain full path information in error messages...
CVE-2006-6533
The CVE-2006-6533 issue affects osCommerce 3.0a3, where a directory traversal flaw in admin/templates_boxes_layout.php allows remote attackers to include and execute arbitrary PHP files by providing a .. in the filter parameter. This can also reveal full path information via error messages. The p...
CVE-2006-6534
Multiple cross-site scripting XSS vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the 1 set parameter to admin/modules.php, the 2 selectedbox parameter to definitiva/admin/customers.php, the 3 lID parameter to admin/languagesdefinitions.php, o...
CVE-2006-6534
Affected software: osCommerce 3.0a3. Description indicates multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. Exploitation vectors involve specific parameters in admin functionality: (1) set parameter to admin/modules.php, (2) s...
CVE-2006-6533: Undefined Security Weakness
Directory traversal vulnerability in admin/templatesboxeslayout.php in osCommerce 3.0a3 allows remote attackers to include and execute arbitrary PHP files via a .. dot dot in the filter parameter. NOTE: this issue can be leveraged to obtain full path information in error messages...
CVE-2006-6534: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the 1 set parameter to admin/modules.php, the 2 selectedbox parameter to definitiva/admin/customers.php, the 3 lID parameter to admin/languagesdefinitions.php, o...
osc303.txt
Oscommerce traversal arbitrary file access Vendor:http://www.oscommerce.com/about/news,125 Advisore:http://lostmon.blogspot.com/2006/12 /oscommerce-traversal-arbitrary-file.html Vendor notify:NO Exploit available: YES osCommerce contains a flaw that allows a remote traversal arbitrary file...
oscommerce-xss.txt
Oscommerce Multiple XSS in admin section. Vendor url:Http://www.oscommerce.com Advisore:http://lostmon.blogspot.com/2006/11/ oscommerce-multiple-xss-in-admin.html Vendor notify:YES Exploit available: YES osCommerce contains a flaw that allows a remote cross site scripting attack.This flaw exists...
Re: Multiple XSS Vulnerabilities in Zen Cart 1.3.5
Full Disclosure Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0003 Status: Full Date: 2006/9/27 Summary: Armorize-ADV-2006-0003 discloses multiple cross-site scripting vulnerabilities that are found in Zen Cart, which is a PHP e-commerce shopping program and is Built on a...
CVE-2006-5190
Multiple cross-site scripting XSS vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in the a bannermanager.php, b bannerstatistics.php, c countries.php, d currencies.php, e languages.php, f...
CVE-2006-5190
CVE-2006-5190 affects osCommerce 2.2 Milestone 2 Update 060817. The vulnerability is a set of multiple XSS flaws exploitable through the page parameter in admin scripts (banner_manager.php, banner_statistics.php, countries.php, currencies.php, languages.php, manufacturers.php, newsletters.php, or...
CVE-2006-5190
Multiple cross-site scripting XSS vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in the a bannermanager.php, b bannerstatistics.php, c countries.php, d currencies.php, e languages.php, f...