3297 matches found
CVE-2010-4211
The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal web server via an arbitrary certificate...
CVE-2010-4211
The CVE-2010-4211 entry concerns the PayPal iOS app (pre-3.0.1). The vulnerability is an SSL hostname verification flaw: the app does not confirm that the server certificate’s subject matches the domain name, enabling MITM attacks with arbitrary certificates and spoofed PayPal servers. The availa...
PT-2010-5359
Name of the Vulnerable Software and Affected Versions PayPal app version prior to 3.0.1 for iOS Description The issue concerns a failure to verify that the server hostname matches the domain name of the subject of an X.509 certificate. This allows man-in-the-middle attackers to spoof a PayPal web...
CVE-2010-4211: Improper Authentication
The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal web server via an arbitrary certificate...
Paypal.com Cross Site Scripting
https://www.paypal.com | HTTP Header Injection | Cross Site Scripting XSS | CAPEC-34 | CWE-79 Hoyt LLC - October 28, 2010 http://cloudscan.blogspot.com | http://cloudscan.me https://www.paypal.com | HTTP Header Injection | Cross Site Scripting XSS Tested on IE8, Chrome, Firefox. The affected URL'...
PHP Shop Cart 5.9 SQL Injection
----------------------------------------------------------------------------------------- PHP SHOP CART V5.9 SQL-i Vulnerability ----------------------------------------------------------------------------------------- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...
BPJewelry Store SQL Injection
----------------------------------------------------------------------------------------- BPJewelry Store SQL-i Vulnerability ----------------------------------------------------------------------------------------- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...
Drupal Ubercart Module < 5.x-1.10 / 6.x-2.4 Multiple Vulnerabilities
Binary data 5634.prm...
SA-CONTRIB-2010-083 - Ubercart sub-modules - Multiple Vulnerabilities
The Ubercart module for Drupal provides e-commerce features. Several modules within Ubercart were vulnerable to various security issues. 1. The 2Checkout gateway module did not properly verify the payment notification information. A malicious user could use a specially crafted HTTP request to...
Bs Home_Classifieds Script SQL Injection
1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs HomeClassifieds Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author : Sid3^effect...
Bs Events_Locator Script SQL Injection
1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs EventsLocator Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author : Sid3^effects...
Bs Auto_Classifieds Script SQL Injection
1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs AutoClassifieds Scriptarticlesdetails.php Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95...
Bs Business_Directory Script SQL Injection
1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs BusinessDirectory Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author :...
Bs Auto_Classifieds Script (search) Sql injection Vulnerability
Exploit for php platform in category web applications =============================================================== Bs AutoClassifieds Script search Sql injection Vulnerability ===============================================================...
Bs Scripts_Directory Sql injection / Auth bypass Vulnerability
Exploit for php platform in category web applications ============================================================== Bs ScriptsDirectory Sql injection / Auth bypass Vulnerability ==============================================================...
Bs Home_Classifieds Script - SQL Injection
Bs HomeClassifieds Script - SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs HomeClassifieds Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL...
Bs Auto_Classifieds Script (articlesdetails) Sqli Vulnerability
Exploit for php platform in category web applications =============================================================== Bs AutoClassifieds Script articlesdetails Sqli Vulnerability ===============================================================...
Bs Scripts_Directory - SQL Injection Authentication Bypass
Bs ScriptsDirectory - SQL Injection Authentication Bypass 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs ScriptsDirectory Sqli/Auth Bypass Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL...
Bs General_Classifieds Script - SQL Injection
Bs GeneralClassifieds Script - SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs GeneralClassifieds Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL...
Bs Business_Directory Script - SQL Injection Authentication Bypass
Bs BusinessDirectory Script - SQL Injection Authentication Bypass 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs BusinessDirectory Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor U...