WordPress WP-Checkout Cross Site Scripting / Shell Upload

Title : Wordpress Plugin wp-checkout XSS / Arbitrary File Upload Author : DevilScreaM Date : 10/31/2013 Category : Web Applications Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber Thanks :...

Easy CMS enterprise built Station system vulnerability 0day-vulnerability warning-the black bar safety net

Easy CMS enterprise built Station system vulnerability 0day in injection: The relevant code: ........................ Omitted part of the.................................... id=request"id":id1=SplitIDs,", ":delid=replacerequest"id","'","" set rs = server. createobject"adodb. recordset" sql="DELET...

Code injection

google-checkout-php-sample-code before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2011-5238

CVE-2011-5238 affects google-checkout-php-sample-code up to version 1.3.1. The issue is inadequate TLS hostname verification: the code does not ensure the server hostname matches CN/subjectAltName, enabling MITM with any valid certificate. Impact per note: partial confidentiality and integrity; n...

CVE-2011-5238: Improper Input Validation

google-checkout-php-sample-code before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2012-4934

TomatoCart 1.1.7 (and possibly other versions) with the PayPal Express Checkout module in sandbox mode contains a design/logic flaw that may allow an attacker who is authenticated to bypass payment requirements by manipulating the PayPal redirect URL from PayPal back to TomatoCart. The result can...

CVE-2012-4934: Undefined Security Weakness

TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL...

TomatoCart with PayPal Express Checkout design flaw vulnerability

Overview TomatoCart 1.1.7 with PayPal Express Checkout, and possibly other versions, contains a design flaw that may allow an attacker to purchase items for free or less than advertised. Description It has been reported that TomatoCart 1.1.7 using the PayPal Express Checkout module in sandbox mod...

WHMCS v4.5.2 Blind SQL Injection Vulnerability

WHMCS WHMCompleteSolution Affected versions: 4.5.x / || | \ | / | '| \ \ /\ / / | '/ \ | || | | | \ V V / | | | | / |/ \,|| // ,|| | Software : WHMCS WHMCompleteSolution Google Dork: Turn on thinking mode :P Date: 10/22/2012 Author: Starware Security Team www.Resecure.me Contact Us :...

CVE-2012-2299

The Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive information by reading from the database...

Information disclosure

The Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive information by reading from the database...

New P2P Zeus Variant Targets Popular Sites with Bogus Offers

Facebook, Gmail, Yahoo and Hotmail users should beware of rogue rebate offers and new secure payment options aimed at getting them to part with their debit card information. Earlier this week Amit Klein, CTO of Trusteer, announced the discovery of a peer-to-peer variant of the Zeus platform that...

WordPress Plugin Zingiri Web Shop 2.4.2 - Persistent Cross-Site Scripting

WordPress Plugin Zingiri Web Shop 2.4.2 - Persistent Cross-Site Scripting Wordpress Zingiri Web Shop Plugin = 2.4.2 Stored XSS Exploit Title: Wordpress Zingiri Web Shop Plugin = 2.4.0 Stored XSS Google Dork: Date: 30 Apr 2012 Author: Mehmet Ince Twitter: https://twitter.com/!/mmetince Company:...

WordPress Plugin Zingiri Web Shop 2.4.0 - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Zingiri Web Shop 2.4.0 - Multiple Cross-Site Scripting Vulnerabilities Wordpress Zingiri Web Shop Plugin '; Exploit: http://localhost/wordpress/?page=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E 'page' variable isn't properly sanitized before being used. STORED XSS P...

WordPress Plugin Zingiri Web Shop 2.4.0 - Multiple Cross-Site Scripting Vulnerabilities

Wordpress Zingiri Web Shop Plugin '; Exploit: http://localhost/wordpress/?page=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E 'page' variable isn't properly sanitized before being used. STORED XSS PS: Attacker should be logged for exploit. ./fws/pages-front/onecheckout.php line 27-29 i...

CVE-2011-5082

Cross-site scripting XSS vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2memberproauthnetcheckoutcoupon parameter aka Coupon Code field...

WordPress WP e-Commerce plugin <= 3.8.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress WP e-Commerce plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23&cs3=123f7bcd4ba53fade05886a7e77bf045&transactiontype=rebill e.g. !/bin/bash payload="-1 AND...

CVE-2009-5059

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by checking out a document that is accessed through a connector, aka SPR MMOI7PSR8J...

Subversion: Access restriction bypass by checkout of the root of the repository

authz.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz shortcircuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass...

Unfixed XSS vulnerability at www.emagic.co.uk

Security researcher nullbyt3, has submitted on 10/07/2010 a cross-site-scripting XSS vulnerability affecting www.emagic.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently...