758 matches found
WordPress Level Four Storefront SQL Injection
Exploit Title: wordpress plugin v3 level four storefront SQL injection Vulnerability Exploit Author: Ashiyane Digital Security Team Home : www.Ashiyane.org Vendor Homepage: www.clubhousenairn.co.uk Software Link: www.levelfourstorefront.com version:3 Tested on: Windows 7 Dork:...
Comersus 8 Shopping Cart Cross Site Request Forgery / SQL Injection
Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart Version: Web Application vendor :http://www.comersus.com/index.html Date: 1 apr,2010 Author:Sid3^effects Code : -------------------------------------------------------------------------------------- Sid3^effects aKa Ha...
i-pos StoreFront 1.3 - index.asp SQL Injection
i-pos StoreFront 1.3 - index.asp SQL Injection source: https://www.securityfocus.com/bid/29471/info i-pos Storefront is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...
i-pos StoreFront 1.3 - 'index.asp' SQL Injection
source: https://www.securityfocus.com/bid/29471/info i-pos Storefront is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...
CVE-2008-1341
SQL injection vulnerability in SearchResults.aspx in LaGarde StoreFront 6 before SP8 allows remote attackers to execute arbitrary SQL commands via the CategoryId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Sql injection
SQL injection vulnerability in SearchResults.aspx in LaGarde StoreFront 6 before SP8 allows remote attackers to execute arbitrary SQL commands via the CategoryId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1341
CVE-2008-1341 describes a SQL injection in the LaGarde StoreFront 6 product prior to SP8, exploitable via the CategoryId parameter in SearchResults.aspx. The vulnerability allows remote attackers to execute arbitrary SQL commands, with the impact described as partial confidentiality/integrity/ava...
CVE-2008-1341
SQL injection vulnerability in SearchResults.aspx in LaGarde StoreFront 6 before SP8 allows remote attackers to execute arbitrary SQL commands via the CategoryId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
StoreFront for Gallery (GALLERY_BASEDIR) Remote File Inclusion Vulnerabilities
StoreFront for Gallery GALLERYBASEDIR Remote File Inclusion Vulnerabilities D.Script: http://www.dalton.net/ppstorefront/ppstorefront.zip Discovered by: Alkomandoz Hacker Homepage: http://Www.asb-may.net Exploit: mods/businessfunctions.php?GALLERYBASEDIR=Shell...
CVE-2007-2068
Multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery allow remote attackers to execute arbitrary PHP code via a URL in the GALLERYBASEDIR parameter to 1 mods/businessfunctions.php or 2 mods/uifunctions.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery allow remote attackers to execute arbitrary PHP code via a URL in the GALLERYBASEDIR parameter to 1 mods/businessfunctions.php or 2 mods/uifunctions.php...
CVE-2007-2068
CVE-2007-2068 describes multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery. An attacker can supply a URL in the GALLERY_BASEDIR parameter to either mods/business_functions.php or mods/ui_functions.php, enabling remote code execution on the affected system. The d...
CVE-2007-2068
Multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery allow remote attackers to execute arbitrary PHP code via a URL in the GALLERYBASEDIR parameter to 1 mods/businessfunctions.php or 2 mods/uifunctions.php...
storefront-rfi.txt
StoreFront for Gallery GALLERYBASEDIR Remote File Inclusion Vulnerabilities D.Script: http://www.dalton.net/ppstorefront/ppstorefront.zip Discovered by: Alkomandoz Hacker Homepage: http://Www.asb-may.net Exploit: mods/businessfunctions.php?GALLERYBASEDIR=Shell...
StoreFront for Gallery (GALLERY_BASEDIR) RFI Vulnerabilities
No description provided by source. StoreFront for Gallery GALLERYBASEDIR Remote File Inclusion Vulnerabilities D.Script: http://www.dalton.net/ppstorefront/ppstorefront.zip Discovered by: Alkomandoz Hacker Homepage: http://Www.asb-may.net Exploit: mods/businessfunctions.php?GALLERYBASEDIR=Shell...
StoreFront for Gallery - 'GALLERY_BASEDIR' Remote File Inclusion
StoreFront for Gallery GALLERYBASEDIR Remote File Inclusion Vulnerabilities D.Script: http://www.dalton.net/ppstorefront/ppstorefront.zip Discovered by: Alkomandoz Hacker Homepage: http://Www.asb-may.net Exploit: mods/businessfunctions.php?GALLERYBASEDIR=Shell...
StoreFront for Gallery (GALLERY_BASEDIR) RFI Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ StoreFront for Gallery GALLERYBASEDIR RFI Vulnerabilities ============================================================ StoreFront for Gallery GALLERYBASEDIR Remote File Inclusion...
StoreFront for Gallery - GALLERY_BASEDIR Remote File Inclusion
StoreFront for Gallery - GALLERYBASEDIR Remote File Inclusion StoreFront for Gallery GALLERYBASEDIR Remote File Inclusion Vulnerabilities D.Script: http://www.dalton.net/ppstorefront/ppstorefront.zip Discovered by: Alkomandoz Hacker Homepage: http://Www.asb-may.net Exploit:...
DUamazon Pro Multiple Scripts SQL Injection
The remote host is running DUamazon Pro, an ASP-based storefront from DUware for Amazon affiliates. The installed version of DUamazon Pro fails to properly sanitize user- supplied input in several instances before using it in SQL queries. By exploiting these flaws, an attacker can affect database...