Sql injection

SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5504

CVE-2015-5504 describes an SQL injection in the Novalnet Payment Module Ubercart for Drupal. The vulnerability stems from failing to sanitize a database query via user-controlled input, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected products: Novalne...

CVE-2015-5504

SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6956

Name of the Vulnerable Software and Affected Versions Novalnet Payment Module Ubercart module for Drupal affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version th...

CVE-2015-5504: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Drupal Novalnet Payment Module SQL Injection Vulnerability

Drupal is a free and open source content management system developed in PHP.Novalnet Payment is a payment module. Drupal Novalnet Payment has a SQL injection vulnerability due to the program failing to adequately filter user-supplied input. The vulnerability allows remote attackers to submit...

Design/Logic Flaw

The Payment for Webform module 7.x-1.x before 7.x-1.5 for Drupal does not restrict access by anonymous users, which allows remote anonymous users to use the payment of other anonymous users when submitting a form that requires payment...

CVE-2014-2009

The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path, and other sensitive information via a direct request to api/curllog.log...

CVE-2014-2008

Summary: CVE-2014-2008 is a SQL injection vulnerability in the mPAY24 PrestaShop payment module (prior to 1.6) where the TID parameter permits remote attackers to inject and execute arbitrary SQL commands. This can lead to information disclosure and potential data manipulation. Affected software:...

PT-2014-4429

Name of the Vulnerable Software and Affected Versions mPAY24 payment module for PrestaShop versions prior to 1.6 Description The issue allows remote attackers to obtain credentials, the installation path, and other sensitive information via a direct request to "api/curllog.log". Recommendations F...

CVE-2014-2008: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter...

Mpay24 PrestaShop Payment Module 1.5 - Multiple Vulnerabilities

Mpay24 PrestaShop Payment Module Multiple Vulnerabilities - · Affected Vendor: Mpay24 - · Affected Software: Mpay24 Payment Module - · Affected Version: 1.5 and earlier - · Issue Type: SQL injection and information disclosure - · Notification Date: 10 February 2014 - · Release Date: 03 September...

Mpay24 Payment Module 1.5 Information Disclosure / SQL Injection Mpay24 Payment Module 1.5 Informat

Mpay24 Payment Module versions 1.5 and below suffer from information disclosure and remote SQL injection vulnerabilities. Mpay24 PrestaShop Payment Module Multiple Vulnerabilities - · Affected Vendor: Mpay24 - · Affected Software: Mpay24 Payment Module - · Affected Version: 1.5 and earlier - ·...

ECShop 2.7.3 /includes/modules/payment/alipay.php SQL注入

No description provided by source...

CVE-2013-0182

The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments...

CVE-2013-0182

The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments...

CVE-2013-0182

The CVE-2013-0182 issue affects the Drupal contributed module Payment (7.x-1.x) prior to 7.x-1.3. The root cause is improper access control that lets remote attackers read other users’ payments. Impact is information disclosure of payments; Drupal core is not affected. Public details confirm the ...

CVE-2013-0182

The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments...

PT-2013-2149

Name of the Vulnerable Software and Affected Versions Drupal Payment module versions 7.x-1.x before 7.x-1.3 Description The issue allows remote attackers to read arbitrary payments due to improper access restriction to payments. Recommendations For versions prior to 7.x-1.3, update to version...

CVE-2013-0182: Undefined Security Weakness

The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments...