2058 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters...
Design/Logic Flaw
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a "frame injection" issue...
Sql injection
Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-5413
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended workstation...
CVE-2013-5405
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 are affected by CVE-2013-5405 (Cross-Site Scripting). The IBM security bulletin lists this and related CVEs, detailing that XSS can be triggered via parameters to inject scripts. Affected versions: B2B Integrator 5.2 and File Gateway 2...
CVE-2013-5413
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 are affected by CVE-2013-5413 because logging out does not invalidate the current session, enabling potential authentication bypass on unattended workstations. The IBM bulletin lists remediation for 5.2/2.2 as applying Fix Pack 5020402...
CVE-2013-5407
CVE-2013-5407 affects IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 (and older 5.1/2.1 with 2.1). The frame injection vulnerability allows a remote attacker to use crafted web content to bypass access restrictions or access sensitive information by abusing FRAME elements. The ...
CVE-2013-5405
Multiple cross-site scripting XSS vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters...
CVE-2013-5411
CVE-2013-5411 concerns IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2, where remote attackers can inject links and trigger unintended navigation or actions via unspecified vectors (Link Injection). The IBM security bulletin aggregates this with other vulnerabilities in the same...
CVE-2013-5409
Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-5406
IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 are affected by CVE-2013-5406 (Windows MHTML cross-site scripting). The vulnerability involves XSS via unspecified parameters, enabling a remote attacker to inject script through interactions with the Windows MHTML protocol handler...
CVE-2013-5411
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject links and trigger unintended navigation or actions via unspecified vectors...
CVE-2013-5407
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a "frame injection" issue...
CVE-2013-5409
IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 are affected by SQL Injection. An authenticated remote attacker could send crafted SQL statements to various screens, enabling view/add/modify/delete data in back-end DB. For affected versions, remediation is available: apply Fix P...
Etoshop B2B Vertical Marketplace Creator 2.0 SQL Injection
=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tybe: Blind sql injection Vulnerability Vendor: http://www.etoshop.com/ + Software: B2B Vertical Marketplace Creator + infection:admin.asp Version :2.0 author: R3d-D3v!L + TEAM: ABH ? contact:...
Etoshop B2B Vertical Marketplace Creator - Multiple SQL Injections
source: https://www.securityfocus.com/bid/64332/info B2B Vertical Marketplace Creator is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit these issues by manipulating the SQL quer...
destoon b2b system all version SQL injection vulnerability analyses reference exp-vulnerability warning-the black bar safety net
在 include/global.func.php in stripsql function to pass the incoming value for the filter, but we can bypass this limit, to achieve the full version of the injected function stripsql$string $search =...
DESTOON存储型xss漏洞可盲打后台
简要描述： 该cms有xss漏洞 详见图 详细说明： Destoon B2B网站系统 申请个帐号 然后购买广告 好像所有的广告都没过滤 随便点一个 直接插xss代码 本地登录后台 点刚才提交的广告 img src="https://images.seebug.org/upload/201309/231129450e3c46e7473433dc63109adb3b3c1f11.jpg" alt="6.jpg" width="600" onerror="javascript:errim...
