CVE-2009-4925

Multiple SQL injection vulnerabilities in Portale e-commerce Creasito aka creasito e-commerce content manager 1.3.16, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 admin/checkuser.php and 2 checkuser.php...

Pre Multi-Vendor SHopping Malls SQL Injection

--------------------------------------------------------------------------- +Title Multi-Vendor Shopping Malls SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 ---------------------------------------------------------------------------...

SA-CONTRIB-2010-071 - MultiSafepay Integration - Cross Site Request Forgery

The MultiSafepay Integration module provides integration between the Ubercart e-commerce solution and the MultiSafepay payment system. The module is vulnerable to Cross Site Request Forgeries CSRF which would allow a malicious user to alter the status of orders or to trick other users into alteri...

CVE-2010-1328

Multiple cross-site scripting XSS vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 tipo or 2 destino parameter to loginregistrese.php3 in the Services section, 3 the rubro parameter to precios.php3 in the Products section, 4...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 tipo or 2 destino parameter to loginregistrese.php3 in the Services section, 3 the rubro parameter to precios.php3 in the Products section, 4...

PreProject Multi-Vendor Shopping Malls - SQL Injection Authentication Bypass

PreProject Multi-Vendor Shopping Malls - SQL Injection Authentication Bypass --------------------------------------------------------------------------- +Title Multi-Vendor Shopping Malls SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3...

NTSOFT BBS E-Market Professional Cross Site Scripting

+================================================================================================+ + NTSOFT BBS E-Market Professional & XSS and Remote Execution Evil code + +================================================================================================+ Authors: Ivan Sanchez...

PreProject Multi-Vendor Shopping Malls - SQL Injection / Authentication Bypass

--------------------------------------------------------------------------- +Title Multi-Vendor Shopping Malls SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 ---------------------------------------------------------------------------...

Sunbyte eFlower Script SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== Sunbyte eFlower Script SQL Injection Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

XT-Commerce 3.0.4 SQL Injection

?php print"\n"; print" Exploit coded by 5ev3n \n"; print" \n"; print" Exploit for XT-Commerce Version 3.0.4 \n"; print" \n"; print" usage: \n"; print" php -f exploit.php http://site.de/ \n"; print" \n"; print" greetz to NEAVORC & http://core.am \n"; print"\n\n"; $checkvuln =...

PHP E-Mall SQL Injection / Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Sunbyte e-Flower SQL Injection & Xss Vulnerability

Exploit for php platform in category web applications ================================================== Sunbyte e-Flower SQL Injection & Xss Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

PHP E-Mall SQL Injection & Xss Vulnerability

Exploit for php platform in category web applications ============================================ PHP E-Mall SQL Injection & Xss Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

eSitesBuilder Cross Site Scripting

Hello Full-Disclosure! I want to warn you about security vulnerabilities in eSitesBuilder. It's Ukrainian CMS which used particularly for e-commerce sites. These vulnerabilities I found in 2007-2008 years at one online shop site and later I found some of these vulnerabilities at another site on...

Restaurant Listing with Online Ordering - SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

VU Mass Mailer 3.4 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

VU Mass Mailer - Authentication Bypass

VU Mass Mailer - Authentication Bypass 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...

VU Mass Mailer Authentication Bypass

Exploit for php platform in category web applications ==================================== VU Mass Mailer Authentication Bypass ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

VU Mass Mailer - Authentication Bypass

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

osCSS 1.2.1 - Arbitrary File Upload

======================================================================= osCSS 1.2.1 REMOTE FILE UPLOAD Vulnerabilities ======================================================================= Vendor: http://www.oscommerce.com/ Date: 2010-05-27 Author : indoushka Thanks to :...