WHMCS‘cart.php’拒绝服务漏洞

BUGTRAQ ID: 65470 WHMCS（WHM Complete Solution）是英国WHMCS公司的一套全面支持域名注册管理解析、主机开通管理、VPS开通管理和服务器管理的一站式主机管理软件。 WHMCS中存在拒绝服务漏洞。攻击者可利用该漏洞造成拒绝服务，拒绝服务合法用户。WHMCS 5.12版本中存在漏洞，其他版本也可能受到影响。 0 WHMCS 5.12 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.whmcs.com/ !/usr/bin/perl @@@ @@@@@@@@@@@ @@@@@...

Uiga Personal Portal - Multiple Vulnerabilities

Uiga Personal Portal - Multiple Vulnerabilities Exploit Title: Uiga Personal Portal Multiple Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection and XSS can be done using the command...

WHMCompleteSolution 'cart.php' Local File Disclosure Vulnerability

WHMCompleteSolution is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application. Th...

Uiga Personal Portal Cross Site Scripting / Blind SQL Injection

Exploit Title: Uiga Personal Portal Multiple Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection and XSS can be done using the command input Vulnerable Page: index.php cart.php...

WHMCompleteSolution (WHMCS) 3.x 4.0.x - cart.php Local File Disclosure

WHMCompleteSolution WHMCS 3.x 4.0.x - cart.php Local File Disclosure Title : WHMCompleteSolution cart.php Local File Disclosure Author : Lagripe-Dz Product : WHMCS WHMCompleteSolution Vendor : http://whmcs.com/ Date : 10/01/2011 Version : 3.x.x , 4.0.x Tested on : linux+apache...

Uiga Personal Portal Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Uiga Personal Portal Multiple Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection and XSS can be done using the...

WHMCompleteSolution (cart.php) Local File Disclosure

Exploit for php platform in category web applications Title : WHMCompleteSolution cart.php Local File Disclosure Author : Lagripe-Dz Product : WHMCS WHMCompleteSolution Vendor : http://whmcs.com/ Date : 10/01/2011 Version : 3.x.x , 4.0.x Tested on : linux+apache...

Sabadkharid SQL Injection

Exploit Title: sabadkharid SQLinjection Vulnerabilities Google Dork: Powered by Parsp.com - Date: 2011-sep-22 Author: s1nahack3r E-Mail ; [email protected] £££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££ / Sql Injection: http://Target/cart.php?shoppingcart&add2cart=1...

eHub SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

SnapProof (cart.php) Cross Site Scripting

Exploit Title: SnapProof cart.php Cross Site Scripting Google Dork: inurl:"Created and powered by SnapProof" home : www.D99Y.com Date: 1/3/2011 Author: Difficult 511 Software Link: http://www.snapproof.com/ file : cart.php exploit : http://localhost/cart.php?retPageID= XSS...

SnapProof Cross Site Scripting

Exploit Title: SnapProof cart.php Cross Site Scripting Google Dork: inurl:"Created and powered by SnapProof" home : www.D99Y.com Date: 1/3/2011 Author: Difficult 511 Software Link: http://www.snapproof.com/ file : cart.php exploit : http://localhost/cart.php?retPageID= XSS...

Prestashop Cartium 1.3.3 - 0.246s SQL Injection

Vulnerable software and vendor: Prestashop, verion: 1.3.3 - 0.246s Sql Injection Vulnerabilities Vulnerable File Vulnerable Field category.php idcategory cart.php idproduct product.php idproduct Vulnerability details: just inject ' and you get sql eror...

digiSHOP SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================== digiSHOP SQL Injection Vulnerability ==================================== ^Date : 23/7/2010 ^Vendor Site : http://digishop.digisoft77.com/ ^MOD Version : digiSHOP 2.0.2 ^Author : Silic0n...

Qualiteam X-Cart 'cart.php' SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Qualiteam X-Cart 'cart.php' SQL Injection Vulnerability ======================================================= Vulnerable: Qualiteam X-Cart 4.0.17 Qualiteam X-Cart 4.0.13 Qualiteam...

Unfixed XSS vulnerability at www.spaagio.com

Security researcher Uber0n, has submitted on 15/04/2008 a cross-site-scripting XSS vulnerability affecting www.spaagio.com, which at the time of submission ranked 3697965 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/04/2008. It is current...

CVE-2007-4439

PHP remote file inclusion vulnerability in popupwindow.php in Squirrelcart 1.x.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the siteisproot parameter, probably related to cart.php...

Squirrelcart <= 1.x.x (cart.php) Remote File Inclusion Vulnerability

No description provided by source. Title : Squirrelcart = 1.x.x Remote File Inclusion URL : http://squirrelcart.com/ Google Dork : inurl:"/squirrelcart/" -squirrelcart.com Author : ShaiMagal Vulnerable file : popupwindow.php - config.php, line 13 - $siteisproot = "blablabla"; Exploit :...

CVE-2007-0134

Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in 1 cart.php and 2 page.php. NOTE: a later report and CVE analysis indicate that the vulnerability is present in 1...

SazCart 1.5 - cart.php Remote File Inclusion

SazCart 1.5 - cart.php Remote File Inclusion sazcart v1.5 cart.php Remote File include ---Hitamputih crew--- Bug Found By : IbnuSina vendor : http://sazcart.com/site Risk : High Greetz : Solpot,permenhack,barbarosa,cah|gemblunkz,fungmen,setiawan,irvian,meteoroid and all member hitamputih crew...

[ECHO_ADV_55$2006]Phpmybibli <=2.1 Multiple Remote File Inclusion Vulnerability

ECHOADV55$2006 ------------------------------------------------------------------------ ----------------------- ECHOADV55$2006Phpmybibli =2.1 Multiple Remote File Inclusion Vulnerability ------------------------------------------------------------------------ ----------------------- Author : Dedi...