Information disclosure

IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files...

CVE-2014-6146

IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files...

CVE-2014-6146

IBM Sterling B2B Integrator 5.2.x–5.2.4 is affected when the Connect:Direct Server Adapter is configured. The vulnerability arises from improper processing of the logging configuration, enabling local users to read log files and obtain sensitive information. Affected component is the logging mech...

CVE-2014-6099

The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach...

Default credentials

The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach...

CVE-2014-6099

The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach...

CVE-2014-6099

IBM Sterling B2B Integrator 5.2.x (and Sterling Integrator 5.1) is affected by CVE-2014-6099 due to a lack of login- Brute-force protection on the Change Password screen, enabling potential admin credential compromise. The IBM bulletin lists affected versions (5.2 through 5.2.4; 5.1 as applicable...

IBM Sterling B2B Detection

Binary data 8570.prm...

CVE-2014-5766

The Uber B2B aka de.mobileeventguide.uberb2b application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Uber B2B aka de.mobileeventguide.uberb2b application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5766

The CVE-2014-5766 entry concerns the Uber B2B Android application version 1.9, which does not verify X.509 certificates from SSL servers. This misconfiguration enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate. The available...

CVE-2014-5766

The Uber B2B aka de.mobileeventguide.uberb2b application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

qibocms b2b 二次注入一枚。

简要描述： 应该是qibo的最后一弹了。 详细说明： 所测试的 http://down.qibosoft.com/down.php?v=b2b 在hy/member/homapagectrl/info.php中 $db-query"INSERT INTO $precompanyfid VALUES $values"; $title=filtrate$title; $picurl=filtrate$picurl; $fname=filtrate$fname; $mytrade=filtrate$mytrade; $qycate=filtrate$qycate;...

shopnc b2b /modules/microshop/index.php 任意文件删除漏洞

No description provided by source...

Destoon前台getshell(CSRF任意代码执行)

简要描述： 测试版本 DESTOON B2B Version 5.0 Release 20140625 UTF-8 ZH-CN 详细说明： 0.问题文件 admin/tag.inc.php 95行 eval$tagcode; 未对用户提交的执行代码tagcode做安全限制 1.前台注册会员 2.进入会员中心，发布一条求购信息 信息标题：随意 行业分类：随意 产品图片：通过审查元素，修改 postthumb 的value为...

2daybiz B2B Portal Script SQL injection Vulnerability

No description provided by source. Exploit Title: 2daybiz B2B Portal Script SQL injection Vulnerability Date: 24/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/b2bportalscript.html Version: N/A Tested on: Windows CVE : =================Exploit================== EXPL0!T...

E-Php B2B Trading Marketplace Script 'listings.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31072/info E-Php B2B Trading Marketplace Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

B2B Classic Trading Script (offers.php) SQL Injection Vulnerability

No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

SoftBiz B2B trading Marketplace Script 1.1 products.php cid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15652/info Softbiz B2B Trading Marketplace is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

SoftBiz B2B trading Marketplace Script 1.1 selloffers.php cid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15652/info Softbiz B2B Trading Marketplace is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...