3466 matches found
Sql injection
Multiple SQL injection vulnerabilities in FrontAccounting FA before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in 1 reporting/, 2 sales/, 3 sales/includes/, 4 sales/includes/db/, 5 sales/inquiry/, 6 sales/manage/, 7...
CVE-2009-4045: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in FrontAccounting FA before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in 1 reporting/, 2 sales/, 3 sales/includes/, 4 sales/includes/db/, 5 sales/inquiry/, 6 sales/manage/, 7...
BPAutoSales 2.0 SQL Injection
x========================================================================================================================================x | AntiSecuritydotorg |...
Design/Logic Flaw
vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the 1 Account Billing Address and 2 Shipping Address fields in a profile by creating a Sales Order SO associated with that profile...
CVE-2009-3257
vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the 1 Account Billing Address and 2 Shipping Address fields in a profile by creating a Sales Order SO associated with that profile...
CVE-2009-3257
CVE-2009-3257 in vtiger CRM affects vtiger CRM before 5.1.0. The vulnerability arises when remote authenticated users can bypass permissions on profile fields (Account Billing Address and Shipping Address) by creating a Sales Order associated with that profile. The description implies a permissio...
CVE-2009-3257
vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the 1 Account Billing Address and 2 Shipping Address fields in a profile by creating a Sales Order SO associated with that profile...
CVE-2009-3257: Undefined Security Weakness
vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the 1 Account Billing Address and 2 Shipping Address fields in a profile by creating a Sales Order SO associated with that profile...
CVE-2008-6963
CVE-2008-6963 affects TurnkeyForms Text Link Sales (admin.php). The vulnerability allows remote attackers to bypass authentication and gain administrative privileges through a direct request. Documents describe the flaw and its impact but do not provide a patch version, workaround, or explicit re...
CVE-2008-6963
admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request...
CVE-2008-6963: Undefined Security Weakness
admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request...
Online Ad Sales Open Door to Viruses
From The Wall Street Journal Emily Steel On a Saturday night at the end of May, visitors to the forums section of Digital Spy, a British entertainment and media news Web site, were greeted with an ad that loaded malicious software onto their computers. The Web site’s advertising system had been...
IT staffs pressured to relax Web security
From SearchSecurity.com Rob Westervelt IT managers are under pressure from the top executives in their organizations to relax their policies on Web security in order to make users more productive. A new survey of more than 1,000 IT managers found that sales and marketing personnel also are leanin...
SalesCart (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================== SalesCart Auth Bypass SQL Injection Vulnerability =================================================== Script :SalesCart Product Management Plugin Site :http://www.salescart.com Demo...
CVE-2009-0328
ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...
CVE-2009-0328
CVE-2009-0328 affects ROBS-PROJECTS Digital Sales IPN (also DS-IPN.NET/DS-IPN Paypal Shop). The issue is insufficient access control that allows remote attackers to directly download the database file (Database/Sales.mdb) from the web root, exposing user credentials. This has been captured in mul...
CVE-2009-0328
ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...
CVE-2009-0328: Undefined Security Weakness
ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...
DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability
No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...