CVE-2008-4170

createaccount.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message...

[NOBYTES.COM: #12] osCommerce 2.2rc2a - Information Disclosure

Application: osCommerce 2.2rc2a Authors Site: http://www.oscommerce.com/ +--------------------------------------------------------------+ Information Disclosure: Manipulation of the 'DOB' Variable on createaccount.php can cause information disclosure: In this example the POST variable 'DOB' has...

oscom-disclose.txt

Application: osCommerce 2.2rc2a Authors Site: http://www.oscommerce.com/ +--------------------------------------------------------------+ Information Disclosure: Manipulation of the 'DOB' Variable on createaccount.php can cause information disclosure: In this example the POST variable 'DOB' has...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. osCommerce: crossite scripting...

Cross-Site Scripting vulnerability in osCommerce

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting persistent уязвимости в системе osCommerce. XSS: POST запрос на странице http://site/shoppingcart.php scriptalertdocument.cookie/script В поле Количество. После инъекции кода, он срабатывает на каждой странице сайта persistent...

osCommerce 2.12.2 - Multiple Cross-Site Scripting Vulnerabilities

osCommerce 2.12.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29055/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...

osCommerce 2.1/2.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29055/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker...

osCommerce Poll Booth 2.0 AddOn - pollbooth.php SQL Injection

osCommerce Poll Booth 2.0 AddOn - pollbooth.php SQL Injection source: https://www.securityfocus.com/bid/28752/info osCommerce Poll Booth is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

osCommerce Poll Booth 2.0 AddOn - 'pollbooth.php' SQL Injection

source: https://www.securityfocus.com/bid/28752/info osCommerce Poll Booth is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access o...

osCommerce Customer Testimonials customer_testimonials.php testimonial_id Parameter SQL Injection

The remote host is running Customer Testimonials, a third-party addon for the open source e-commerce system osCommerce. The version of Customer Testimonials installed on the remote host fails to sanitize user input to the 'testimonialid' parameter of the 'customertestimonials.php' script before...

Sql injection

SQL injection vulnerability in customertestimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonialid parameter...

CVE-2008-0719

SQL injection vulnerability in customertestimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonialid parameter...

CVE-2008-0719

The CVE-2008-0719 entry describes an SQL injection vulnerability in the customer_testimonials.php script of the osCommerce Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2. The flaw allows remote attackers to manipulate database queries via the testimonial_id parameter, po...

CVE-2008-0719

SQL injection vulnerability in customertestimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonialid parameter...

osCommerce Addon Customer Testimonials 3.1 - SQL Injection

osCommerce Addon Customer Testimonials 3.1 - SQL Injection osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...

osCommerce Addon Customer Testimonials 3.1 SQL Injection Vulnerability

No description provided by source. osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...

oscom-sql.txt

osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...

osCommerce Addon Customer Testimonials 3.1 - SQL Injection

osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...

123tkShop 0.9.1 Remote Authentication Bypass Vulnerability

No description provided by source. By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...

123tkShop 0.9.1 - Remote Authentication Bypass

123tkShop 0.9.1 - Remote Authentication Bypass By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...