bug in oscomerce

Advisory 2 Title: file Modification in osCommerce Author: 0ozeuso0 Contact: [email protected] Website: olimpusklan.org Date: 27/12/2005 Risk: High Vendor Url: http://www.oscommerce.com/ Affected Software: osCommerce Non Affected: We Are: Olimpus KlaN TECHNICAL INFO...

SQL

Hello vuln, SQL Injection in OsCommerce: ex: http://./index.php?cPath=23105&page=1&sort=-1a or http://./index.php?cPath=23105&page=1&sort='2a ----- -- Best regards, t3rr4n mailto:[email protected]...

CVE-2004-2638

The CVE-2004-2638 vulnerability affects osCommerce 1.5.1 via the Admin Access With Levels plugin. The issue allows remote attackers to access files in the admin/ directory by setting in_login to a non-zero value, enabling partial confidentiality and integrity impact. No exploitation details or sp...

CVE-2004-2638

The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the inlogin parameter to a non-zero value...

osCommerce Cross Site Scripting Bugs

osCommerce is a widely installed open source shopping e-commerce solution. An attacker may use it to perform a cross site scripting attack on this host. OpenVAS Vulnerability Test $Id: osCommercexss.nasl 9087 2018-03-12 17:24:24Z cfischer $ Description: osCommerce Cross Site Scripting Bugs Author...

osCommerce directory traversal

The remote host is running osCommerce, a widely installed open source shopping e-commerce solution. The remote version of this software is vulnerable to a directory traversal flaw which may be exploited by an attacker to read arbitrary files on the remote server with the privileges of the web...

File Disclosure in osCommerce

There is a vulnerability in the osCommerce's File Manager that allows an attacker to retrieve arbitrary files from the webserver that reside outside the bounding HTML root directory. OpenVAS Vulnerability Test $Id: oscommercefilemanagerdisclosure.nasl 6053 2017-05-01 09:02:51Z teissa $ Descriptio...

osCommerce Malformed Session ID XSS Vulnerability

osCommerce is an online shop e-commerce solution under on going development by the open source community. Its feature packed out-of-the-box installation allows store owners to setup, run, and maintain their online stores with minimum effort and with absolutely no costs or license fees involved...

osCommerce Directory Traversal Vulnerability

osCommerce is vulnerable to a directory traversal flaw which may be exploited by an attacker to read arbitrary files on the remote server with the privileges of the web server. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are...

osCommerce Malformed Session ID XSS Vulnerability

osCommerce is vulnerable to an XSS flaw. The flaw can be exploited when a malicious user passes a malformed session ID to URI. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

osCommerce XSS Vulnerability (Mar 2003) - Active Check

osCommerce is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2003 k-otik.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

osCommerce File Disclosure Vulnerability

There is a vulnerability in the osCommerce SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oscommerce:oscommerce"; ifdescription...

CVE-2003-1219

CVE-2003-1219 affects osCommerce prior to version 2.2-MS3. The vulnerability is a cross-site scripting (XSS) flaw in the tep_href_link function in html_output.php that can be triggered by manipulating the osCsid parameter, enabling remote attackers to inject arbitrary scripts or HTML. Connected s...

CVE-2003-1219

Cross-site scripting XSS vulnerability in the tephreflink function in htmloutput.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter...

osCommerce Unprotected Admin Directory

The installation of osCommerce on the remote host apparently lets anyone access the application's admin directory, which means that they have complete administrative access to the site. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

osCommerce update.php readme_file Parameter Arbitrary File Disclosure

The osCommerce installation on the remote host has a supplementary script, 'extras/update.php', that fails to validate user-supplied input to the 'readmefile' parameter before using that to display a file. An attacker can exploit this flaw to read arbitrary files on the remote host, such as the...

CVE-2005-2330

Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via 1 .. sequences or 2 a full pathname in the readmefile parameter...

CVE-2005-2330

Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via 1 .. sequences or 2 a full pathname in the readmefile parameter...

EUVD-2005-2331

Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via 1 .. sequences or 2 a full pathname in the readmefile parameter...

CVE-2005-2330

CVE-2005-2330 describes a directory-traversal flaw in osCommerce 2.2, specifically in the extras/update.php script. A remote attacker can exploit the readme_file parameter by using ".." sequences or a full pathname to read arbitrary files on the server. Impact is described as the ability to acces...