orbitalprosthetic.com XSS vulnerability

Vulnerable URL: http://www.orbitalprosthetic.com/basket.php?PHPSESSID=n86lp11p42a7m0dl1bs0ln2mh7=add=58%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

musical.gr XSS vulnerability

Vulnerable URL: http://www.musical.gr/basket.php?guilanguage=1...

AShop Deluxe 4.5 ashop/basket.php cat Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may leverage these issues ...

Lava SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Lava newsitem.php?id album.php?id basket.php?baction AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.lava.com.ua/ Persian Gulf 4 Ever! Dork : "Разработано в компании...

CVE-2007-0056: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to a ashop/catalogue.php and b ashop/basket.php, the 2 exp parameter to ashop/catalogue.php, the 3 searchstrin...

CVE-2006-0939

SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the 1 id or 2 action parameter to a basket.php, or 3 id or 4 page parameter to b cat.php...

CVE-2006-0939

SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the 1 id or 2 action parameter to a basket.php, or 3 id or 4 page parameter to b cat.php...

CVE-2006-0939: Undefined Security Weakness

SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the 1 id or 2 action parameter to a basket.php, or 3 id or 4 page parameter to b cat.php...

CVE-2005-1440: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbitrary web script or HTML via 1 various parameters to basket.php, 2 the nickname, email, topic, and message fields in forum.php, as demonstrated using forumnewthread.php and...