TotalShopUK 1.7.2 SQL Injection

Exploit Title: TotalShopUK E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.totalshopuk.com Version: 1.7.2 Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Exploit: products/c/index.php/1' Demo:...

Axis Commerce 0.8.1 Cross Site Scripting

Exploit Title: Axis Commerce E-Commerce System Stored XSS Date: 19.08.2011 Author: Eyup CELIK Software Link: https://github.com/downloads/axis/axiscommerce/axis-0.8.1.zip Version: 0.8.1 and previus Tested on: Apache For Windows ISSUE Vulnerable Modules = Search Module XSS can be done using the...

Squirrelcart PRO 3.0.0 Blind SQL Injection

Squirrelcart PRO 3.0.0 Blind SQL Injection Vulnerability Name Squirrelcart PRO Vendor http://www.squirrelcart.com Versions Affected 3.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-21 X. INDEX I. ABOUT THE...

CVE-2010-3210

Multiple PHP remote file inclusion vulnerabilities in Multi-lingual E-Commerce System 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 checkout2-CYM.php, 2 checkout2-EN.php, 3 checkout2-FR.php, 4 cat-FR.php, 5 cat-EN.php, 6 cat-CYM.php, 7...

CVE-2010-3210

CVE-2010-3210 affects the Multi-lingual E-Commerce System 0.2. The issue is multiple PHP remote file inclusion in inc/ via include_path in scripts (checkout2-CYM.php, checkout2-EN.php, checkout2-FR.php, cat-FR.php, cat-EN.php, cat-CYM.php, checkout1-CYM.php, checkout1-EN.php, checkout1-FR.php, pr...

CVE-2010-3210

Multiple PHP remote file inclusion vulnerabilities in Multi-lingual E-Commerce System 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 checkout2-CYM.php, 2 checkout2-EN.php, 3 checkout2-FR.php, 4 cat-FR.php, 5 cat-EN.php, 6 cat-CYM.php, 7...

Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion

Exploit for php platform in category web applications ================================================================== Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion ================================================================== bug found by Jose Luis Gongora Fernandez...

Multi-lingual E-Commerce System 0.2 - Multiple Remote File Inclusions

Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://sourceforge.net/projects/mlecsphp/ - CMS: A multi-lingual multi-currency PHP...

ECMall 2.2 app/groupbuy.app.php delay injection vulnerability-vulnerability warning-the black bar safety net

ECMall community e-Commerce systemreferred to as ECMallis Shanghai commercial school network Technology Co., Ltd. following the ECShop after the launch of yet another e-Commerce sister product app\groupbuy. app. php:2 6: function index $id = empty$GET'id' ? 0 : $GET'id'; //id not filtered if !$ i...

Sunbyte eFlower Script SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== Sunbyte eFlower Script SQL Injection Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Sunbyte e-Flower SQL Injection Vulneralbility

Exploit for unknown platform in category web applications ============================================= Sunbyte e-Flower SQL Injection Vulneralbility ============================================= / Software Information + Vendor : http://www.sunbyte.net/ + Download :...

Multi-lingual E-Commerce System 0.2 Multiple Remote Vulnerabilities

No description provided by source. Salvatore "drosophila" Fresta + Application: Multi-lingual E-Commerce System + Version: 0.2 + Website: http://sourceforge.net/projects/mlecsphp/ + Bugs: A Local File Inclusion B Information Disclosure C Arbitrary File Upload + Exploitation: Remote + Date: 19 Apr...

Multi-lingual E-Commerce System 0.2 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Multi-lingual E-Commerce System 0.2 Multiple Remote Vulnerabilities =================================================================== Salvatore "drosophila" Fresta +...

Multi-Lingual E-Commerce LFI / Disclosure / Upload

Salvatore "drosophila" Fresta + Application: Multi-lingual E-Commerce System + Version: 0.2 + Website: http://sourceforge.net/projects/mlecsphp/ + Bugs: A Local File Inclusion B Information Disclosure C Arbitrary File Upload + Exploitation: Remote + Date: 19 Apr 2009 + Discovered by: Salvatore...

multi-lingual E-Commerce system 0.2 - Multiple Vulnerabilities

multi-lingual E-Commerce system 0.2 - Multiple Vulnerabilities Salvatore "drosophila" Fresta + Application: Multi-lingual E-Commerce System + Version: 0.2 + Website: http://sourceforge.net/projects/mlecsphp/ + Bugs: A Local File Inclusion B Information Disclosure C Arbitrary File Upload +...

Code injection

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...

CVE-2006-5936

CVE-2006-5936 describes an SQL injection in dept.asp of the SiteXpress E-Commerce System, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. Affected component: dept.asp in SiteXpress E-Commerce System. Root cause: improper handling of the id parameter leading t...

sitexpress.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/SiteXpress.txt ----------------------------------------------------------- Software: SiteXpress E-Commerce System Method : SQL Injection PoC: http://target/path/ http://target/path/dept.asp?id=SQL Contact:...

CVE-2006-5936

SQL injection vulnerability in dept.asp in SiteXpress E-Commerce System allows remote attackers to execute arbitrary SQL commands via the id parameter...

CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability

No description provided by source. Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, they could be...