CVE-2006-5246

Eazy Cart allows remote attackers to change prices and other critical fields via unspecified vectors to easycart.php, probably including the price parameter. NOTE: some details are obtained from third party information...

Multiple Vulnerabilities in Apple QuickTime

McAfee, Inc. McAfee Averttm Labs Security Advisory Public Release Date: 2006-09-12 Apple QuickTime Multiple Vulnerabilities CVE-2006-4382, CVE-2006-4384, CVE-2006-4385, CVE-2006-4386, CVE-2006-4388, CVE-2006-4389 Synopsis Apple QuickTime is a multimedia technology used to process image, audio and...

Muratsoft Haber Portal 3.6 (tr) Remote SQL Injection Vulnerability

No description provided by source. Muratsoft Haber Portal v3.6 tr SQL Injection Vulnerability Author : ASIANEAGLE Site : www.asianeagle.org Contact: [email protected] Link : http://www.aspindir.com/Goster/4350 Demo Portal : http://www.muratsoft.com/haber/www/ Price of Portal: 300YTL // Good...

SLQ Injection vulnerability in WPCeasy

My first vulnerability report : Description: "WPC.easy" is a database generated website with a dynamic on-line administration suite which allows for product updates, editing, deleting, image upload and price changes. "WPC.easy" is powered by a Secure Database. vendor:...

CVE-2005-4016: Undefined Security Weakness

SQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute arbitrary SQL commands via the 1 propertyid, 2 zipcode, 3 propertytypeid, 4 price, and 5 cityid parameters to property.php...

paypalFlaw.txt

PayPal 'butons' price manipulation. vendor url:https://www.paypal.com/ http://lostmon.blogspot.com/2005/05/ paypal-arbitrary-price-manipulation.html vendor notify: yes exploit available: yes Discovered by FalconDeOro1 and Lostmon2 PayPal buttons are prone to price manipulation. all stores based o...

Dragonfly Shopping Cart Multiple vulnerabilities

Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc or even code them. Learn more at http://www.dbtech.org Severity: High Title: Dragonfly Shopping Cart Multiple vulnerabilities Date:...

CVE-2005-2220

Dragonfly Commerce (Dragonfly) is affected by a vulnerability where remote attackers can modify the hidden field x_DragonflyCartProductPrice to alter product prices via several endpoints (dc_Categorieslist.asp, dc_Categoriesview.asp, dc_productslist.asp, dc_productslist_Clearance.asp). The vendor...

CVE-2005-2220

Dragonfly Commerce allows remote attackers to change a product price by modifying the xDragonflyCartProductPrice hidden field to 1 dcCategorieslist.asp, 2 dcCategoriesview.asp, 3 dcproductslist.asp, and 4 dcproductslistClearance.asp. NOTE: the vendor has disputed this issue, saying that "Dragonfl...

CVE-2005-2220

Dragonfly Commerce allows remote attackers to change a product price by modifying the xDragonflyCartProductPrice hidden field to 1 dcCategorieslist.asp, 2 dcCategoriesview.asp, 3 dcproductslist.asp, and 4 dcproductslistClearance.asp. NOTE: the vendor has disputed this issue, saying that "Dragonfl...

PT-2005-3149 · Dragonfly · Dragonfly Commerce

Name of the Vulnerable Software and Affected Versions: Dragonfly Commerce affected versions not specified Description: The issue allows remote attackers to change a product price by modifying the x DragonflyCartProductPrice hidden field in several API endpoints, including "dc Categorieslist.asp",...

CVE-2005-2220: Undefined Security Weakness

Dragonfly Commerce allows remote attackers to change a product price by modifying the xDragonflyCartProductPrice hidden field to 1 dcCategorieslist.asp, 2 dcCategoriesview.asp, 3 dcproductslist.asp, and 4 dcproductslistClearance.asp. NOTE: the vendor has disputed this issue, saying that "Dragonfl...

CVE-2005-1398

phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the 1 price or 2 postage parameters. NOTE: it was later reported that 3.4 through 4.6.4 are also affected...

CVE-2005-1398

PHPCart vulnerability CVE-2005-1398 affects PHPCart 3.2 (and note: 3.4–4.6.4 later reported) where remote attackers can alter price information by modifying (1) price or (2) postage parameters. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network access, no authentication, and pa...

CVE-2005-1398

phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the 1 price or 2 postage parameters. NOTE: it was later reported that 3.4 through 4.6.4 are also affected...

CVE-2005-1398: Improper Input Validation

phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the 1 price or 2 postage parameters. NOTE: it was later reported that 3.4 through 4.6.4 are also affected...

CVE-2004-1209

Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase...

CVE-2004-1209

Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase...

CVE-2004-1209: Undefined Security Weakness

Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase...

Yahoo! Store Security Advisory

Yahoo! Store Security Advisory Advisory: http://securitytracker.com/id?1011403 Date: September 23, 2004 Vendor: Yahoo! Product: Yahoo! Store Status: Fixed by the vendor; Coordinated release Credit: Ben Efros [email protected] http://www.citiprice.com/ Description: Ben Efros reported the followin...