T-Soft E-Commerce 4 SQL Injection

Exploit Title: T-Soft E-Commerce 4 - SQLi Authenticated Exploit Author: Alperen Ergel Contact: @alpernae IG/TW Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux Category: WebApp Google Dork: N/A CVE: 2022-28132 Date: 18.02.2022 Description Step-1: Login as Admin or...

T-Soft E-Commerce 4 - SQL injection (Authenticated) Vulnerability

Exploit Title: T-Soft E-Commerce 4 - SQLi Authenticated Exploit Author: Alperen Ergel Contact: @alpernae IG/TW Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux Category: WebApp Google Dork: N/A CVE: 2022-28132 Description Step-1: Login as Admin or with privilage use...

T-Soft E-Commerce 4 - SQLi (Authenticated)

Exploit Title: T-Soft E-Commerce 4 - SQLi Authenticated Exploit Author: Alperen Ergel Contact: @alpernae IG/TW Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux Category: WebApp Google Dork: N/A CVE: 2022-28132 Date: 18.02.2022 Description Step-1: Login as Admin or...

org.apache.jackrabbit:jackrabbit-index-filters (1.2.1), org.apache.jackrabbit:jackrabbit-jca (1.2.1) +1 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.2.1)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-index-filters 1.2.1 -...

com.liferay.maven.plugins:liferay-maven-plugin (>=6.0.2, <=6.0.6), org.apache.jackrabbit:jackrabbit-jca (1.6.1) +2 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.6.1)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - com.liferay.maven.plugins:liferay-maven-plugin =6.0.2, =6.0.6 -...

org.apache.jackrabbit:jackrabbit-jca (1.6.5), org.apache.jackrabbit:jackrabbit-webapp (1.6.5) potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.6.5)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-jca 1.6.5 - org.apache.jackrabbit:jackrabbit-webapp...

org.apache.jackrabbit:jackrabbit-jca (1.5.6), org.apache.jackrabbit:jackrabbit-webapp (1.5.6) potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.5.6)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-jca 1.5.6 - org.apache.jackrabbit:jackrabbit-webapp...

org.apache.jackrabbit:jackrabbit-jca (1.5.7), org.apache.jackrabbit:jackrabbit-webapp (1.5.7) potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.5.7)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-jca 1.5.7 - org.apache.jackrabbit:jackrabbit-webapp...

org.apache.camel:camel-jcr (>=2.0-m2, <=2.8.6), org.apache.jackrabbit:jackrabbit-jca (1.5.5) +1 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.5.5)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.camel:camel-jcr =2.0-m2, =2.8.6 - org.apache.jackrabbit:jackrabbit-jca 1.5...

org.apache.jackrabbit:jackrabbit-jca (1.5.2), org.apache.jackrabbit:jackrabbit-webapp (1.5.2) potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.5.2)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-jca 1.5.2 - org.apache.jackrabbit:jackrabbit-webapp...

org.apache.jackrabbit:jackrabbit-bundle (2.10.0), org.apache.jackrabbit:jackrabbit-jca (2.10.0) +2 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (2.10.0)

org.apache.jackrabbit:jackrabbit-core MAVEN version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-bundle 2.10.0 - org.apache.jackrabbit:jackrabbit-jc...

org.apache.jackrabbit:jackrabbit-bundle (2.10.0), org.apache.jackrabbit:jackrabbit-jca (2.10.0) +2 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (2.10.0)

org.apache.jackrabbit:jackrabbit-core MAVEN version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-bundle 2.10.0 - org.apache.jackrabbit:jackrabbit-jc...

org.apache.camel:camel-jcr (2.9.0-rc1), org.apache.jackrabbit:jackrabbit-jca (1.6.4) +1 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.6.4)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.camel:camel-jcr 2.9.0-rc1 - org.apache.jackrabbit:jackrabbit-jca 1.6.4 -...

org.apache.jackrabbit:jackrabbit-jca (1.3.1), org.apache.jackrabbit:jackrabbit-webapp (1.3.1) potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.3.1)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-jca 1.3.1 - org.apache.jackrabbit:jackrabbit-webapp...

org.apache.jackrabbit:jackrabbit-jca (1.5.4), org.apache.jackrabbit:jackrabbit-webapp (1.5.4) potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.5.4)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-jca 1.5.4 - org.apache.jackrabbit:jackrabbit-webapp...

org.apache.jackrabbit:jackrabbit-jca (1.5.0), org.apache.jackrabbit:jackrabbit-ocm-nodemanagement (1.5.0) +3 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.5.0)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-jca 1.5.0 -...

org.apache.jackrabbit:jackrabbit-jca (1.3), org.apache.jackrabbit:jackrabbit-webapp (1.3) potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.3)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-jca 1.3 - org.apache.jackrabbit:jackrabbit-webapp 1.3...

org.apache.jackrabbit:jackrabbit-index-filters (1.2.3), org.apache.jackrabbit:jackrabbit-jca (1.2.3) +1 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.2.3)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-index-filters 1.2.3 -...

io.inkstand:inkstand-jcr-jackrabbit (>=0.1.1, <=0.1.3), io.inkstand:scribble (>=0.1.0, <=0.2.0) +23 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (2.8.0)

org.apache.jackrabbit:jackrabbit-core MAVEN version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - io.inkstand:inkstand-jcr-jackrabbit =0.1.1, =0.1.0, =0.3.0, =0.3.0, =0.4.0-m1,...

com.day.cq:cq-compat-codeupgrade (>=1.0.4, <=1.2.10), org.apache.jackrabbit:jackrabbit-jca (>=2.0-beta1, <=2.0.5) +1 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (>=2.0-beta1, <=2.0.5)

org.apache.jackrabbit:jackrabbit-core MAVEN version =2.0-beta1, =1.0.4, =2.0-beta1, =2.0-beta1, =2.0.5 Source cves: CVE-2015-1833 Source advisory: OSV:GHSA-9284-J4C9-779Q...