Lucene search
+L

2766 matches found

exploitpack
exploitpack
added 2009/06/04 12:00 a.m.15 views

Host Directory PRO 2.1.0 - Remote Change Admin Password

Host Directory PRO 2.1.0 - Remote Change Admin Password change password Host Directory PRO 2.1.0 Configuration Web Interface Password Admin Email Receive Authorize.Net On Off Authorize login Authorize transactionKey /fo...

0.3AI score
SaveExploits0
zdt
zdt
added 2009/06/04 12:00 a.m.19 views

Host Directory PRO 2.1.0 Remote Change Admin Password Exploit

Exploit for unknown platform in category web applications ============================================================= Host Directory PRO 2.1.0 Remote Change Admin Password Exploit ============================================================= change password Host Directory PRO 2.1.0 Configuratio...

7.1AI score
SaveExploits0
zdt
zdt
added 2009/05/29 12:00 a.m.60 views

AMember 3.1.7 (XSS/SQL/HI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== AMember 3.1.7 XSS/SQL/HI Multiple Remote Vulnerabilities ========================================================== AMember - Multiple Vulnerabilities Version Affected: 3.1.7...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2009/05/29 12:00 a.m.32 views

amember 3.1.7 - Cross-Site Scripting SQL Injection HTML Injection

amember 3.1.7 - Cross-Site Scripting SQL Injection HTML Injection AMember - Multiple Vulnerabilities Version Affected: 3.1.7 Apr-10-2009 newest Info: aMember is a flexible membership and subscription management PHP script. It has support for PayPal, BeanStream, 2Checkout, NoChex, VeriSign PayFlow...

SaveExploits0
seebug.org
seebug.org
added 2009/05/29 12:00 a.m.53 views

AMember 3.1.7 (XSS/SQL/HI) Multiple Remote Vulnerabilities

No description provided by source. AMember - Multiple Vulnerabilities Version Affected: 3.1.7 Apr-10-2009 newest Info: aMember is a flexible membership and subscription management PHP script. It has support for PayPal, BeanStream, 2Checkout, NoChex, VeriSign PayFlow, Authorize.Net, PaySystems,...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2009/05/25 12:00 a.m.202 views

[InterN0T] AMember 3.1.7 - Multiple Vulnerabilities

AMember - Multiple Vulnerabilities Version Affected: 3.1.7 Apr-10-2009 newest Info: aMember is a flexible membership and subscription management PHP script. It has support for PayPal, BeanStream, 2Checkout, NoChex, VeriSign PayFlow, Authorize.Net, PaySystems, Probilling, Multicards, E-Gold and...

6.9AI score
SaveExploits0
NVD
NVD
added 2009/04/22 9:30 p.m.26 views

CVE-2009-1366

Cross-site scripting XSS vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke DNN before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "name/value pairs" and "paypal IPN functionality."...

4.3CVSS5.7AI score0.0103EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2009/04/22 9:30 p.m.7 views

CVE-2009-1366

Cross-site scripting XSS vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke DNN before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "name/value pairs" and "paypal IPN functionality."...

4.3CVSS5.9AI score0.0103EPSS
SaveExploits0References4
Prion
Prion
added 2009/04/22 9:30 p.m.24 views

Cross site scripting

Cross-site scripting XSS vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke DNN before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "name/value pairs" and "paypal IPN functionality."...

4.3CVSS6.1AI score0.0103EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2009/04/22 9:00 p.m.35 views

CVE-2009-1366

Cross-site scripting XSS vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke DNN before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "name/value pairs" and "paypal IPN functionality."...

5.7AI score0.0103EPSS
SaveExploits0References3
CVE
CVE
added 2009/04/22 9:00 p.m.61 views

CVE-2009-1366

CVE-2009-1366 corresponds to a Cross-site Scripting (XSS) vulnerability in DotNetNuke (DNN) prior to 4.9.3, specifically in Website\admin\Sales\paypalipn.aspx. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to name/value pairs and PayPal I...

4.3CVSS5.8AI score0.0103EPSS
SaveExploits0References3Affected Software1
securityvulns
securityvulns
added 2009/04/01 12:00 a.m.93 views

PayPal resource exhaustion

Vulnerability: malicious Web site can cause Denial of Service by forcing user into spending money from his PayPal account to buy different unnecessary things, leading to situation of resource consumption where user can not obtain his daily bread on this day. Workaround: put more money into PayPal...

2.4AI score
SaveExploits0
Prion
Prion
added 2009/03/26 9:00 p.m.18 views

Design/Logic Flaw

admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter...

7.5CVSS7.4AI score0.06331EPSS
SaveExploits1References4
NVD
NVD
added 2009/03/26 9:00 p.m.18 views

CVE-2008-6535

admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter...

7.5CVSS6.8AI score0.06331EPSS
SaveExploits1References4
CVE
CVE
added 2009/03/26 8:28 p.m.51 views

CVE-2008-6535

The CVE-2008-6535 entry concerns PayPal eStores: admin/settings.php allows remote attackers to bypass access restrictions and change the administrator password via a direct request with a modified NewAdmin parameter. The NVD entry lists a base score of 7.5 (HIGH) with NETWORK attack vector and LO...

7.5CVSS7.1AI score0.06331EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2009/03/26 8:28 p.m.29 views

CVE-2008-6535

admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter...

6.8AI score0.06331EPSS
SaveExploits1References4
CVE
CVE
added 2009/01/29 6:09 p.m.53 views

CVE-2009-0328

CVE-2009-0328 affects ROBS-PROJECTS Digital Sales IPN (also DS-IPN.NET/DS-IPN Paypal Shop). The issue is insufficient access control that allows remote attackers to directly download the database file (Database/Sales.mdb) from the web root, exposing user credentials. This has been captured in mul...

5CVSS6.6AI score0.07294EPSS
SaveExploits1References3Affected Software1
Packet Storm
Packet Storm
added 2009/01/20 12:00 a.m.39 views

DS-IPN Paypal Shop Database Disclosure

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

7.4AI score
SaveExploits0
seebug.org
seebug.org
added 2009/01/18 12:00 a.m.31 views

DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

7.1AI score
SaveExploits0
zdt
zdt
added 2009/01/18 12:00 a.m.33 views

DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability ==============================================================...

7.1AI score
SaveExploits0
Rows per page
Query Builder