952 matches found
osCommerce 2.2 - adminmanufacturers.php?page Cross-Site Scripting
osCommerce 2.2 - adminmanufacturers.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...
osCommerce 2.2 - adminlanguages.php?page Cross-Site Scripting
osCommerce 2.2 - adminlanguages.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user...
osCommerce 2.2 - adminspecials.php?page Cross-Site Scripting
osCommerce 2.2 - adminspecials.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user ...
osCommerce 2.2 - adminorders_status.php?page Cross-Site Scripting
osCommerce 2.2 - adminordersstatus.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...
osCommerce 2.2 - adminbanner_statistics.php?page Cross-Site Scripting
osCommerce 2.2 - adminbannerstatistics.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecti...
osCommerce 2.2 - adminproducts_attributes.php?page Cross-Site Scripting
osCommerce 2.2 - adminproductsattributes.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
osCommerce 2.2 - admintax_classes.php?page Cross-Site Scripting
osCommerce 2.2 - admintaxclasses.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting use...
osCommerce 2.2 - adminstats_products_viewed.php?page Cross-Site Scripting
osCommerce 2.2 - adminstatsproductsviewed.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
osCommerce 2.2 - admincountries.php?page Cross-Site Scripting
osCommerce 2.2 - admincountries.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user...
osCommerce 2.2 - adminnewsletters.php?page Cross-Site Scripting
osCommerce 2.2 - adminnewsletters.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting us...
osCommerce 2.2 - adminstats_products_purchased.php?page Cross-Site Scripting
osCommerce 2.2 - adminstatsproductspurchased.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
osCommerce 2.2 - adminreviews.php?page Cross-Site Scripting
osCommerce 2.2 - adminreviews.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user i...
osCommerce 2.2 - adminbanner_manager.php?page Cross-Site Scripting
osCommerce 2.2 - adminbannermanager.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...
osCommerce 2.2 - admintax_rates.php?page Cross-Site Scripting
osCommerce 2.2 - admintaxrates.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user ...
osCommerce 2.2 - adminproducts_expected.php?page Cross-Site Scripting
osCommerce 2.2 - adminproductsexpected.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecti...
oscommerce-page-txt
osCommerce multiple Scripts 'page' param XSS Vendor url: http://www.oscommerce.com Vendor Bugtracker:http://www.oscommerce.com/community/bugs,4303 Advisore: http://lostmon.blogspot.com/2006/10/ oscommerce-multiple-scripts-page-param.html Vendor notify:yes osCommerce contains a flaw that allows a...
oscommerce22-php.txt
php poc exploit for osCommerce = 2.2 Milestone 2 060817 vuln found by gulftech it does not work with magicquotesgpc on so make it off to test this script. you're lucky if you can find server with this settings set to off. this is for education use only. topic: sql injection. kiddies use it at you...
osCommerce 2.1/2.2 - 'product_info.php' SQL Injection
source: https://www.securityfocus.com/bid/19774/info osCommerce is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...
osCommerce 2.12.2 - product_info.php SQL Injection
osCommerce 2.12.2 - productinfo.php SQL Injection source: https://www.securityfocus.com/bid/19774/info osCommerce is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...
CVE-2006-4298
Multiple directory traversal vulnerabilities in cache.php in osCommerce before 2.2 Milestone 2 060817 allow remote attackers to determine existence of arbitrary files and disclose the installation path via a .. dot dot in unspecified parameters in the 1 tepcachealsopurchased, 2...