QuickCommerce 2.5/3.0,Cart32 2.5 a/3.0,Shop Express 1.0,StoreCreator 3.0 Web Shopping Cart Hidden Form Field Vulnerability

No description provided by source. E-Commerce Exchange QuickCommerce 2.5/3.0,McMurtrey/Whitaker & Associates Cart32 2.5 a/3.0,Shop Express 1.0,StoreCreator 3.0 Web Shopping Cart Hidden Form Field Vulnerability source: http://www.securityfocus.com/bid/1237/info Various shopping cart applications u...

iFdate <= 2.0.3 - Remote SQL Injection Vulnerability

No description provided by source. iFdate = 2.0.3 SQL Injection Vulnerability Author: !DoktOR! Date found: 26.08.08 Product: iFdate Version: 2.0.3 Price: $140 Download script: http://depositfiles.com/ru/files/537317 Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off...

Flex Timesheet Authentication Bypass Vulnerability

No description provided by source. =================================================== Flex Timesheet - Authentication Bypass Vulnerability =================================================== My + Author : KnocKout Contact : [email protected] + Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB H4X0...

Barter Sites 1.3 Joomla Component Multiple Vulnerabilities

No description provided by source. Barter Sites 1.3 Component Joomla SQL Injection & Persistent XSS vulnerabilities Release Date Bug. 28-Oct-2011 Date Added. 01-Oct-2011 Vendor Notification Date. Never Product. Barter Sites Platform. Joomla Affected versions. 1.3 Type. Commercial Price. $99 Attac...

MYRE Classified (cat) SQL Injection Vulnerability

No description provided by source. MYRE Classified SQL injection vulnerability - cat Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : January 29, 2010 Software Information + Vendor : http://myrephp.com/ + Vulnerability : SQL injection + Dork : syalalala + Price...

PG Social Networking Shell Upload Vulnerabilty

No description provided by source. ============================================================== PG Social Networking --Shell upload Vulnerabilty ============================================================== Name : PG Social Networking --Shell upload Vulnerabilty Date : july 9,2010 Critical Lev...

Joomla Component ProDesk 1.5 - Local File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------- Joomla Component ProDesk v 1.5 comprodesk&includefile Local File Inclusion http://joomlashowroom.com Price - $ 49.99...

Active Price Comparison 4 - (ProductID) Blind SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date: 28.11.2008 Home:...

Alibaba Clone Platinum (about_us.php) SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------- Alibaba Clone Platinum aboutus.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21...

Uzbey: Price Manipulation

Hey guys, I put this down as a 2nd bug as it may have been overlooked from the previous report and I figured it'd be easier to track a fix and add comments separately... When completing an order it looks like it may be possible to pay an arbitrary amount - what happens is a request is generated t...

Threat Outbreak Alert: Fake Product Price Quote Request Email Messages on May 9, 2014

Medium Alert ID: 34178 First Published: 2014 May 9 15:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product price quote request for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Price Inquiry Notification Email Messages on March 31, 2014

Medium Alert ID: 33599 First Published: 2014 April 1 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a price inquiry notification for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Product Price List Email Messages on February 16, 2014

Medium Alert ID: 32885 First Published: 2014 February 17 14:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product price list for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Email Messages with Malicious Attachments on January 22, 2014

Medium Alert ID: 32546 First Published: 2014 January 23 15:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

UAEPD Shopping Script SQL Injection

uaepd script – Multiple Sql Injection Vulnerabilty ==================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.uaepd.net/ .:. Dork :...

shopex 4.8.5 product filter page somewhere without intval lead to injection vulnerabilities-vulnerability warning-the black bar safety net

Relates to version: shopex-single-4.8.5.80603 whether you need to login: no login required Whether the default configuration: is the presence or absence of the use of the code: code Vulnerability details: Product filter price range somewhere not intval result in injection of...

Opencart Multiple Vulnerabilities

Title: Opencart Multiple Vulnerabilities Vendor: http://www.opencart.com Vulnerabilities: Arbitrary File Upload, XSS, Path Disclosure Vulnerable Version: opencart 1.5.6 prior versions also may be affected Exploitation: Remote with browser Impact: High Vendor Supplied Patch: N/A Original Advisory...

Threat Outbreak Alert: Fake Product Price Request Email Messages on December 3, 2013

Medium Alert ID: 32008 First Published: 2013 December 4 16:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a product price request for the recipient. The text in the e-mail message attempts to...

CVE-2013-5977

Cross-site request forgery CSRF vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote attackers to hijack the authentication of administrators for requests that 1 create or modify products or conduct cross-site scripting XSS attacks via the 2...

phpVibe 3.1 Disclosure / Remote File Inclusion

Exploit Title: phpVibe 3.1 Multiple Vulnerability Date: 2013-05-07 Author: indoushka Software Link: http://phprevolution.com/ Category: webapps/php Version: 3.1 Price: 40€ Google dork: "Powered by phpVibe v3.1" installation Application error message :...