CVE-2013-5413: Improper Authentication

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended workstation...

Etoshop B2B Vertical Marketplace Creator 2.0 SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tybe: Blind sql injection Vulnerability Vendor: http://www.etoshop.com/ + Software: B2B Vertical Marketplace Creator + infection:admin.asp Version :2.0 author: R3d-D3v!L + TEAM: ABH ? contact:...

Etoshop B2B Vertical Marketplace Creator - Multiple SQL Injections

source: https://www.securityfocus.com/bid/64332/info B2B Vertical Marketplace Creator is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit these issues by manipulating the SQL quer...

destoon b2b system all version SQL injection vulnerability analyses reference exp-vulnerability warning-the black bar safety net

在 include/global.func.php in stripsql function to pass the incoming value for the filter, but we can bypass this limit, to achieve the full version of the injected function stripsql$string $search =...

DESTOON存储型xss漏洞可盲打后台

简要描述： 该cms有xss漏洞 详见图 详细说明： Destoon B2B网站系统 申请个帐号 然后购买广告 好像所有的广告都没过滤 随便点一个 直接插xss代码 本地登录后台 点刚才提交的广告 img src="https://images.seebug.org/upload/201309/231129450e3c46e7473433dc63109adb3b3c1f11.jpg" alt="6.jpg" width="600" onerror="javascript:errim...

ShopEx 4.8.5 /core/api/shipping/2.0/api_b2b_2_0_region.php SQL注入漏洞

No description provided by source...

CVE-2013-0494

IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service memory and CPU consumption via a crafted HTTP 1 Range or 2 Request-Range header...

Design/Logic Flaw

IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service memory and CPU consumption via a crafted HTTP 1 Range or 2 Request-Range header...

CVE-2013-0494

IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service memory and CPU consumption via a crafted HTTP 1 Range or 2 Request-Range header...

CVE-2013-0494

Summary of CVE-2013-0494 : IBM Sterling B2B Integrator (versions 5.0 and 5.1; and related components like Sterling File Gateway 2.1/2.2) is affected by an HTTP Byte Range denial-of-service vulnerability. A remote, unauthenticated attacker can trigger memory and CPU exhaustion by sending specially...

PT-2013-2384

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 5.0 through 5.1 Description The issue allows remote attackers to cause a denial of service, consuming memory and CPU, by sending a crafted HTTP request. This can be achieved via a manipulated Range or...

CVE-2013-0494: Undefined Security Weakness

IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service memory and CPU consumption via a crafted HTTP 1 Range or 2 Request-Range header...

Destoon B2B建站软件最新版SQL盲注漏洞

简要描述： Destoon B2B建站存在SQL注入漏洞（已经打了20130703补丁） 详细说明： /module/mall/buy.inc.php 这个文件，除了已经修复了的知道创宇上报的那个注入点，还存在其他注入点。 if$submit require DTROOT.'/module/'.$module.'/cart.class.php'; $do = new cart; $cart = $do-get; if$post $add = arraymap'trim', $add; $add'address' = areapos$add'areaid', ''.$add'address...

CVE-2013-0539

An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack...

CVE-2013-2984

Directory traversal vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to read or modify files via unspecified vectors...

CVE-2013-3020

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-0568,...

CVE-2013-0481

The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering 1 an error or 2 an exception...

CVE-2013-0558

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via unspecified vectors...

CVE-2013-0560

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2012-5766...

CVE-2013-0567

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...