WordPress Zingiri 2.2.3 Code Execution

get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45. $selectedDocuments$key = $POST'value'; 46. $sessionAction-set$selectedDocuments; 47. 48. 49. echo...

Joomla Component Alameda (com_alameda) SQL Injection

No description provided by source. Joomla Component Alameda comalameda SQL Injection Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 1 Nov , 2011 Software Information + Vendor :...

CVE-2010-4954

SQL injection vulnerability in productreviewsinfo.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the productsid parameter...

redmind Online-Shop / E-Commerce-System SQL injection flaws and fixes-vulnerability warning-the black bar safety net

Title: redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Software address: Test platform: Linux IDBlackcoder Author: MbahSemar www.92hack.net The defect file: http://www.xxxx.net/product.php?prodID=SQLi Example http://www.xxx.net/product.php?prodID=9999 and 1=2 union select...

Redmind Online-Shop / E-Commerce System SQL Injection

Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : "powered by redmind�" or "Entwickelt und betrieben von redmind�" Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on : Linux IDBlackcoder Date : September 28th, 2011 Author...

redmind Online-Shop E-Commerce-System - SQL Injection

redmind Online-Shop E-Commerce-System - SQL Injection Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : "powered by redmind�" or "Entwickelt und betrieben von redmind�" Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on :...

redmind Online-Shop / E-Commerce-System - SQL Injection

Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : "powered by redmind�" or "Entwickelt und betrieben von redmind�" Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on : Linux IDBlackcoder Date : September 28th, 2011 Author...

redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : "powered by redmind" or "Entwickelt und betrieben von redmind" Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on :...

WordPress WP e-Commerce插件"cs1"参数SQL注入漏洞

BUGTRAQ ID: 49612 WordPress WP e-Commerce是基于WP和Web 2.0技术开发的一款电子商务购物车插件程序。 WordPress WP e-Commerce插件在"cs1"参数过滤用户数据时存在SQL注入漏洞，远程攻击者可利用此漏洞控制应用程序，访问或修改数据。 WordPress WP e-Commerce 3.8.6 厂商补丁： WordPress --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://wordpress.org/...

CVE-2011-3577

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors...

Authentication flaw

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors...

CVE-2011-3577

CVE-2011-3577 affects IBM WebSphere Commerce: versions 6.x up to 6.0.0.11 and 7.x up to 7.0.0.3 do not properly implement Activity Token authentication for Web Services. The underlying cause is an improper authentication mechanism, but the connected documents do not specify exact technical detail...

CVE-2011-3577

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors...

Drupal CMS v7.5.x - Multiple Web Vulnerabilities

Document Title: =============== Drupal CMS v7.5.x - Multiple Web Vulnerabilities References Source: ==================== Released on the german ePost Security Cup http://www.deutschepost.de/dpag?lang=deEN&xmlFile=link10227921022790 Release Date: ============= 2011-09-17 Vulnerability Laboratory I...

WordPress e-Commerce Plugin <= 3.8.6 - SQL Injection

This WordPress e-Commerce plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin E-Commerce 3.8.6 - SQL Injection

WordPress Plugin E-Commerce 3.8.6 - SQL Injection Exploit Title: WordPress WP e-Commerce plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23&cs3=123f7bcd4ba53fade05886a7e77bf045&transactiontype=rebill e.g. !/bin/bash payload="-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0...

WordPress WP e-Commerce 3.8.6 SQL Injection

Exploit Title: WordPress WP e-Commerce plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23&cs3=123f7bcd4ba53fade05886a7e77bf045&transactiontype=rebill e.g. !/bin/bash payload="-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" hash=echo -n $payload | md5sum | tr -d '\n' | se...

WordPress WP e-Commerce plugin <= 3.8.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress WP e-Commerce plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23&cs3=123f7bcd4ba53fade05886a7e77bf045&transactiontype=rebill e.g. !/bin/bash payload="-1 AND...

Axis Commerce HTML Injection Vulnerability

Axis Commerce is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie- based authentication credentials or...

Axis Commerce <= 0.8.1 XSS Vulnerability - Active Check

Axis Commerce is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...