765 matches found
StoreFront for Gallery (GALLERY_BASEDIR) RFI Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ StoreFront for Gallery GALLERYBASEDIR RFI Vulnerabilities ============================================================ StoreFront for Gallery GALLERYBASEDIR Remote File Inclusion...
StoreFront for Gallery - GALLERY_BASEDIR Remote File Inclusion
StoreFront for Gallery - GALLERYBASEDIR Remote File Inclusion StoreFront for Gallery GALLERYBASEDIR Remote File Inclusion Vulnerabilities D.Script: http://www.dalton.net/ppstorefront/ppstorefront.zip Discovered by: Alkomandoz Hacker Homepage: http://Www.asb-may.net Exploit:...
DUamazon Pro Multiple Scripts SQL Injection
The remote host is running DUamazon Pro, an ASP-based storefront from DUware for Amazon affiliates. The installed version of DUamazon Pro fails to properly sanitize user- supplied input in several instances before using it in SQL queries. By exploiting these flaws, an attacker can affect database...
CVE-2005-0936
Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2005-0935
Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the 1 idpages parameter to pages.php or the 2 id2 parameter to products1.php...
Multiple sql injection, and xss vulnerabilities in Pay pal Storefront
Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: Multiple sql injection, and xss vulnerabilities in Pay pal Storefront Date: March 25, 2005 Summary: There are multiple sql injection, xss vulnerabilities in the Pay pal Storefront...
CVE-2005-0935
Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the 1 idpages parameter to pages.php or the 2 id2 parameter to products1.php...
CVE-2005-0936
CVE-2005-0936 describes a cross-site scripting vulnerability in the PayPal Storefront component, specifically in the file products1h.php, where the id parameter can be abused to inject arbitrary web script or HTML. Affected software is indicated as ESMI PayPal Storefront; the vulnerability is cat...
CVE-2005-0936
Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2005-0935
CVE-2005-0935 affects the ESMI PayPal Storefront. The provided documents describe multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands through two parameters: idpages in pages.php and id2 in products1.php. The affected software is the PayPal Storefr...
CVE-2005-0935: Undefined Security Weakness
Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the 1 idpages parameter to pages.php or the 2 id2 parameter to products1.php...
CVE-2005-0936: Undefined Security Weakness
Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter...
ESMI PayPal StoreFront 1.7 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/12904/info ESMI PayPal Storefrom is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in...
ESMI PayPal StoreFront 1.7 - Cross-Site Scripting
ESMI PayPal StoreFront 1.7 - Cross-Site Scripting source: https://www.securityfocus.com/bid/12904/info ESMI PayPal Storefrom is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage th...
ESMI PayPal StoreFront 1.7 - products1.php?id2 SQL Injection
ESMI PayPal StoreFront 1.7 - products1.php?id2 SQL Injection source: https://www.securityfocus.com/bid/12903/info ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL...
ESMI PayPal StoreFront 1.7 - 'products1.php?id2' SQL Injection
source: https://www.securityfocus.com/bid/12903/info ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query. Successful exploitation could result in a compromise ...
ESMI PayPal StoreFront 1.7 - 'pages.php?idpages' SQL Injection
source: https://www.securityfocus.com/bid/12903/info ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query. Successful exploitation could result in a compromise ...
dcrab-paypal.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: Multiple sql injection, and xss vulnerabilities in Pay pal Storefronts Date: March 25, 2005 Vendor: http://www.esmistudio.com Summary:...
LaGarde StoreFront 5.0 Shopping Cart - login.asp SQL Injection
LaGarde StoreFront 5.0 Shopping Cart - login.asp SQL Injection source: https://www.securityfocus.com/bid/13998/info StoreFront Shopping Cart is affected by an SQL injection vulnerability. The vulnerability affects the 'login.asp' script. Successful exploitation could result in a compromise of the...
LaGarde StoreFront 5.0 Shopping Cart - 'login.asp' SQL Injection
source: https://www.securityfocus.com/bid/13998/info StoreFront Shopping Cart is affected by an SQL injection vulnerability. The vulnerability affects the 'login.asp' script. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit...