Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...

CVE-2012-2116

The CVE-2012-2116 issue affects the Drupal Commerce Reorder module, specifically versions prior to 7.x-1.1. The root cause is a CSRF vulnerability in the re-order URL that allows remote attackers to hijack a user’s cart by submitting requests to add items. Impact is limited to anyone with access ...

CVE-2012-2116

Cross-site request forgery CSRF vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart...

Sistem Biwes Multiple Vulnerability

Exploit for php platform in category web applications =================================================================== Sistem Biwes Multiple Vulnerability =================================================================== Google Dork: "Powered by sistembiwes.com" Author: eidelweiss @randyario...

Team GhostShell leak One Million Records

TeamGhostShell a team linked with the Activist group Anonymous, is claiming that they have hacked some major U.S. institutions including major banking institutions, accounts of politicians and has posted those details online. The dumps comprising of millions of accounts has been let loose on the...

Cross site scripting

Cross-site scripting XSS vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the customtext parameter. NOTE: some of these details are obtained from third party...

CVE-2011-5104

CVE-2011-5104 affects the WP e-Commerce plugin (WordPress) in the file wpsc-admin/display-sales-logs.php with a vulnerability in the custom_text parameter, allowing remote attackers to inject arbitrary script/HTML (XSS). The issue is observed in WP e-Commerce 3.8.7.1 and possibly earlier. Remedia...

Cesar Cerrudo on Owning Your CEO

Dennis Fisher talks with Cesar Cerrudo of IOActive Labs about his research project that used Fortune 500 executives’ corporate email addresses as the starting point to gather data about their online activities. Cerrudo found that he was able to map executives’ activities across a wide range of...

WordPress WP E-Commerce Plugin <= 3.8.7.1 - XSS

Because of this vulnerability in wpsc-admin/display-sales-logs.php, the attackers can inject arbitrary web script or HTML via the "customtext" parameter. Solution Update the plugin...

Microsoft Windows TabStrip MSCOMCTL.OCX RCE Vulnerability

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerc...

Microsoft Windows Common Controls Remote Code Execution Vulnerability (2720573)

This host is missing a critical security update according to Microsoft Bulletin MS12-060. OpenVAS Vulnerability Test $Id: secpodms12-060.nasl 5912 2017-04-10 09:01:51Z teissa $ Microsoft Windows Common Controls Remote Code Execution Vulnerability 2720573 Authors: Veerendra G G Copyright: Copyrigh...

Microsoft Windows Common Controls ActiveX Control CVE-2012-1856 Remote Code Execution Vulnerability

Description Microsoft Windows Common Controls is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the...

Joomla! Component com_enmasse 1.2.0.4 - SQL Injection

Joomla! Component comenmasse 1.2.0.4 - SQL Injection Exploit Title: Joomla comenmasse Remote Exploit Author: Daniel Barragan "D4NB4R" Español hola, este exploit afecta sitios de ecommerce por lo cual el exploit solo dara una muestra de la extraccion posible de datos, No me hago responsable del us...

Senate Committee to Discuss Do Not Track at Key Hearing

The dram surrounding the Do Not Track specification and its implementation by browser manufacturers is set to continue on Thursday when the Senate Commerce Committee will hold a hearing to discuss whether the proposed specification is strong enough or has been weakened by the digital advertising...

LogiSoft Online-Shop / E-Commerce-System Sql Injection/XSS Vulnerabilties

Exploit for php platform in category web applications LogiSoft Online-Shop / E-Commerce-System Sql Injection/XSS Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.logisoft.be/ === Exploit ==...

Google Data Shows Attack and Phishing Sites Increasing Rapidly

The number of compromised sites detected each month by Google’s antimalware and anti-phishing systems has been dropping rather steadily from a peak of more than 300,000 in early 2009 and is now down around 150,000. However, the company’s statistics also show that the number of outright malicious...

iBoutique eCommerce 4.0 - Multiple Web Vulnerabilities

iBoutique eCommerce 4.0 - Multiple Web Vulnerabilities Title: ====== iBoutique eCommerce v4.0 - Multiple Web Vulnerabilites Date: ===== 2012-06-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=594 VL-ID: ===== 594 Common Vulnerability Scoring System:...

iBoutique eCommerce 4.0 SQL Injection / Cross Site Scripting

Title: ====== iBoutique eCommerce v4.0 - Multiple Web Vulnerabilites Date: ===== 2012-06-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=594 VL-ID: ===== 594 Common Vulnerability Scoring System: ==================================== 8 Introduction: =============...

iBoutique eCommerce v4.0 - Multiple Web Vulnerabilities

Document Title: =============== iBoutique eCommerce v4.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=594 Release Date: ============= 2012-06-08 Vulnerability Laboratory ID VL-ID: ==================================== 594...

Jabong.com Cross Site Scripting

Website: www.jabong.com Vulnerability: Session Hijacking VIA XSS Criticality: Moderate to Risky Author: Karthik R a.k.a 3psil0nlambda www.epsilonlambda.wordpress.org --------------------------------------------------- About the site: Jabong.com is a young and vibrant company that aims to provide...