Sql injection

A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The manipulation of the argument token with the input 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj leads to sql...

CVE-2017-20137 Itech B2B Script catcompany.php sql injection

A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The manipulation of the argument token with the input 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj leads to sql...

CVE-2017-20137 Itech B2B Script catcompany.php sql injection

A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The manipulation of the argument token with the input 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj leads to sql...

CVE-2017-20137

CVE-2017-20137 affects Itech B2B Script 4.28. A SQL injection vulnerability exists in the handling of /catcompany.php, triggered by crafting input such as 704667c6a1e7ce56d3d6fa748ab6d9af3fd7’ AND 6539=6539 AND ’Fakj’=’Fakj. The issue is exploitable remotely and the exploit has been disclosed pub...

Ambit Technologies iTech B2B Script SQL注入漏洞

Ambit Technologies iTech B2B Script is a B2B e-commerce system script from Ambit Technologies, India. Ambit Technologies iTech B2B Script version 4.28 suffers from a SQL injection vulnerability that stems from the presence of an insecure file, subpage.php, which can be exploited by an attacker to...

PT-2022-8004

Name of the Vulnerable Software and Affected Versions Itech B2B Script version 4.28 Description A critical issue affects the processing of the file /catcompany.php. The manipulation of the token argument with a specific input leads to SQL injection. The attack can be initiated remotely. The explo...

CVE-2017-20137: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The manipulation of the argument token with the input 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj leads to sql...

How Technology Can Help Your Business Succeed

By Owais Sultan The B2B world is known as the bland counterpart of B2C, and this is because of the two… This is a post from HackRead.com Read the original post: How Technology Can Help Your Business Succeed...

Insider Threat: Employees indicted for stealing $88 million of license keys

Two insiders and an accomplice were indicted on Tuesday for multiple counts of fraud. According to documents unsealed by the Wester District of Oaklahoma, a grand jury charged Raymond Bradley Pearce aka Brad Pearce, a former employee of Avaya; Dusti O. Pearce, his wife; and Jason M. Hines aka Joe...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2023-05244)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterlin...

CVE-2021-38954

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414...

Design/Logic Flaw

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414...

CVE-2021-38954

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414...

CVE-2021-38954

CVE-2021-38954 affects IBM Sterling B2B Integrator Standard Edition. The vulnerability is an information disclosure that allows an attacker to obtain sensitive version information, potentially aiding further attacks. Affected versions are 6.0.0.0–6.0.3.5 and 6.1.0.0–6.1.1.0. IBM provides fixes: u...

CVE-2021-38954: Undefined Security Weakness

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414...

Security Bulletin: IBM Sterling B2B Integrator B2B API is vulnerable to information disclosure vulnerability (CVE-2021-38954)

Summary IBM Sterling B2B Integrator has addressed a sensitive version information disclosure vulnerability. Vulnerability Details CVEID:CVE-2021-38954 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could diclose sensitive version information that could aid in future attacks against the...

Malicious code in b2b-event-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aed27a1d433185da787b0aed1964e26c1a94bb18dcb99a2be19bbc8b0366c53f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1400 Malicious code in b2b-event-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aed27a1d433185da787b0aed1964e26c1a94bb18dcb99a2be19bbc8b0366c53f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6247 Malicious code in spotify-b2b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c539189f641ea8043f9015a8e6bd03168888b20ede254ae58a0b60886c0701f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IBM DataPower Gateway has an unspecified vulnerability

IBM DataPower Gateway is a set of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interface API, web, service-oriented architecture SOA, B2B and cloud workloads. The platform protects, integrates, and optimizes access across channel...