Paypal Inc BB #104 - Persistent Exception Vulnerability

Document Title: =============== Paypal Inc BB 104 - Persistent Exception Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1038 PayPal Security UID: gJ1127yy Release Date: ============= 2013-10-25 Vulnerability Laboratory ID VL-ID:...

Paypal Inc #105 MOS - Multiple Print Layout Vulnerabilities

Document Title: =============== Paypal Inc 105 MOS - Multiple Print Layout Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1039 PayPal Security UID: xE1128lV Release Date: ============= 2013-10-14 Vulnerability Laboratory ID VL-ID:...

Threat Outbreak Alert: Fake Product Shipping Information Email Messages on September 23, 2013

Medium Alert ID: 30947 First Published: 2013 September 23 20:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product shipping notification for the recipient. The message attempts to persuade the recipient to open th...

Threat Outbreak Alert: Fake Shipping Order Information Email Messages on May 27, 2014

Medium Alert ID: 30681 First Published: 2013 September 6 19:46 GMT Last Updated: 2014 May 28 12:54 GMT Version: 42 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain order shipment information from FedEx. The email message attempts to...

Threat Outbreak Alert: Fake Shipping Confirmation Email Messages on September 10, 2013

Medium Alert ID: 30661 First Published: 2013 September 5 15:15 GMT Last Updated: 2013 September 11 15:01 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipping confirmation notification for the recipient. The text in...

Threat Outbreak Alert: Fake Shipping Notification Email Messages on December 4, 2013

Medium Alert ID: 30628 First Published: 2013 September 3 14:54 GMT Last Updated: 2013 December 5 15:04 GMT Version: 24 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipping notification for the recipient. The text in the email...

Threat Outbreak Alert: Fake Shipping Information Email Messages on August 29, 2013

Medium Alert ID: 30544 First Published: 2013 August 29 15:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed package delivery notification from DHL Global for the recipient. The text in the message body attempts...

ShopEx 4.8.5 /core/api/shipping/pim/3.1/api_pim_3_1_goods.php columns SQL注入漏洞

No description provided by source...

Threat Outbreak Alert: Fake Shipping and Handling Inquiry Email Messages on July 22, 2013

Medium Alert ID: 30164 First Published: 2013 July 22 16:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order inquiry for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Shipping Invoice Notification Email Messages on July 14, 2013

Medium Alert ID: 30084 First Published: 2013 July 15 18:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipping invoice notification for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Shipping and Handling Advice Request Email Messages on July 1, 2013

Medium Alert ID: 29869 First Published: 2013 July 1 17:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an inquiry for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Shipping Document Email Messages on June 26, 2013

Low Alert ID: 29814 First Published: 2013 June 27 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment of shipping documents for the recipient. The text in the email message attempts to persuade the...

Threat Outbreak Alert: Fake Shipping Manifest Document Email Messages on June 25, 2013

Medium Alert ID: 29799 First Published: 2013 June 26 14:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment of shipping documents for the recipient. The text in the email message attempts to persuade the...

CVE-2013-1465

The Cubecart::basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping parameter, as demonstrated by modifying the application configuration using the Config object...

Code injection

The Cubecart::basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping parameter, as demonstrated by modifying the application configuration using the Config object...

PT-2013-3150 · Cubecart · Cubecart

Name of the Vulnerable Software and Affected Versions: CubeCart versions 5.0.0 through 5.2.0 Description: The issue allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping parameter. This can be used to modify the application configuration using the Config object...

CubeCart 5.2.0 PHP Object Injection

------------------------------------------------------------------------- CubeCart set'shipping', unserializebase64urldecode$POST'shipping'; 522. if !isset$POST'proceed' 523. httpredircurrentPage; 524. 525. User input passed through the $POST'shipping' parameter is not properly sanitized before...

ecshop all version injection analysis-vulnerability warning-the black bar safety net

Some time ago, probably 2 0 1 2 Christmas around the t00ls saw ecshop all version injection, then also downloaded the latest program analysis,recent exam is busy, just today I put my analysis of the recorded. Vulnerability key file: /includes/liborder.php Key functions: | 0 1 | function...

ShopEx4. 8 5 vulnerability the shipping address can be any view modify delete a-vulnerability warning-the black bar safety net

Ordinary members, after logging in, by a maliciously constructed URL can be achieved for the entire site shipping address to view, modify, and delete. Causing the user sensitive privacy leak and website, unnecessary losses. Detailed description: core/shop/controller/ctl. member. php file //Modify...

Threat Outbreak Alert: Fake Portuguese Pornographic Video Email Messages on April 22, 2014

Medium Alert ID: 26252 First Published: 2012 June 26 21:46 GMT Last Updated: 2014 April 23 14:15 GMT Version: 3 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an attachment to a pornographic video file for the...