Xxe

IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663...

CVE-2017-1192

IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663...

CVE-2017-1174

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296...

CVE-2017-1192

IBM Sterling B2B Integrator 5.2 is affected by CVE-2017-1192 (XML External Entity Injection) when processing XML data. A remote attacker could exfiltrate sensitive information or exhaust memory/resources. IBM’s bulletin specifies remediation: apply the 5.2 fix packs IT19755 or 5020603_2/5020602_4...

CVE-2017-1192

IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663...

CVE-2017-1174

CVE-2017-1174 affects IBM Sterling B2B Integrator Standard Edition 5.2. The vulnerability is SQL injection that could allow a remote attacker to view, add, modify, or delete data in the back-end database. Affected product/version: IBM Sterling B2B Integrator Standard Edition 5.2. Root cause: SQL ...

Entrepreneur B2B Script SQL Injection

Exploit Title: Entrepreneur B2B Script - 'pid' Parameter SQL Injection Date: 2017-08-02 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://readymadeb2bscript.com/ Version: All Version Exploit : http://site.com/path/productview1.php?pid=-99999+SQL+Comm...

Xxe

XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...

CVE-2015-0194

XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...

CVE-2015-0194

CVE-2015-0194 affects IBM Sterling B2B Integrator (versions 5.1 and 5.2) and IBM Sterling File Gateway (versions 2.1 and 2.2). The underlying issue is an XML External Entity (XXE) processing vulnerability in these products’ XML handling, allowing a remote attacker to read arbitrary files by suppl...

Entrepreneur B2B Script - pid SQL Injection

Entrepreneur B2B Script - pid SQL Injection Exploit Title: Entrepreneur B2B Script - 'pid' Parameter SQL Injection Date: 2017-08-02 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://readymadeb2bscript.com/ Version: All Version Exploit :...

Entrepreneur B2B Script - 'pid' SQL Injection

Exploit Title: Entrepreneur B2B Script - 'pid' Parameter SQL Injection Date: 2017-08-02 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://readymadeb2bscript.com/ Version: All Version Exploit : http://site.com/path/productview1.php?pid=-99999+SQL+Comm...

Entrepreneur B2B Script - pid Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Entrepreneur B2B Script - 'pid' Parameter SQL Injection Date: 2017-08-02 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://readymadeb2bscript.com/ Version: All Version Exploit :...

CVE-2017-1496

IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

Cross site scripting

IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1496

IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1496

CVE-2017-1496 affects IBM Sterling B2B Integrator Standard Edition (5.2.x). A cross-site scripting vulnerability exists in the Queue Watcher component that allows an attacker to inject arbitrary JavaScript into the Web UI, potentially leading to credential disclosure within a trusted session. The...

Alibaba.com B2B Trade App - Certificates or keys found, ContentProvider mode not defined, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Alibaba.com B2B Trade App published at the 'play' market has multiple vulnerabilities...

New EU Privacy Laws Will Complicate B2B Data Sharing

NEW YORK – United States companies doing business abroad are grumbling over new European privacy laws set to take effect in less than one year. The EU privacy rules are far more stringent than U.S. laws, and are meant to give consumers the upper hand when it comes to controlling what data is stor...

Cross site scripting

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...