Information disclosure

IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms...

Design/Logic Flaw

IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact and remote attack vectors...

CVE-2009-2752

CVE-2009-2752 affects IBM WebSphere Commerce 7.0. The vulnerability is a failure to properly encrypt data in the database, which can allow local users to obtain sensitive information by defeating cryptographic protections. The available documents do not specify affected components, root cause det...

CVE-2009-2751

CVE-2009-2751 involves IBM WebSphere Commerce 7.0, where the same cryptographic key is used for both session attributes and merchant data encryption. The underlying cause is the reuse of a single key for distinct encryption domains, which the documents describe as having an unspecified impact and...

CVE-2009-2752

IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms...

CVE-2009-2751

IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact and remote attack vectors...

Populum 2.3 SQL Injection

::::::::::::::ProUd to Be InDiaN:::::::::::::: AuthoR : -SiLeNtp0is0n- Vuln. App : Populum version 2.3 App Detail : Content management software for hybrid blog/media/commerce communities VuLneraBiLity : SQL injection DoRk : "Powered by Populum" My HoMe : www.andhrahackers.com gReetZ : Mr.XXXX...

Populum 2.3 - SQL Injection

Populum 2.3 - SQL Injection Exploit Title: Populum SQL injection vulnerability Author: -SiLeNtp0is0n- Version: 2.3 ::::::::::::::ProUd to Be InDiaN:::::::::::::: AuthoR : -SiLeNtp0is0n- Vuln. App : Populum version 2.3 App Detail : Content management software for hybrid blog/media/commerce...

osCommerce 2.2 Arbitrary PHP Code Execution

$Id: oscommercefilemanager.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Sunbyte e-Flower SQL Injection

/ ! Sunbyte e-Flower SQL Injection Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 28, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor : http://www.sunbyte.net/ + Download :...

Sunbyte e-Flower SQL Injection Vulneralbility

No description provided by source. / ! Sunbyte e-Flower SQL Injection Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 28, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor :...

Sunbyte e-Flower - SQL Injection

Sunbyte e-Flower - SQL Injection / ! Sunbyte e-Flower SQL Injection Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 28, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor :...

Sunbyte e-Flower SQL Injection Vulneralbility

Exploit for unknown platform in category web applications ============================================= Sunbyte e-Flower SQL Injection Vulneralbility ============================================= / Software Information + Vendor : http://www.sunbyte.net/ + Download :...

Sunbyte e-Flower - SQL Injection

/ ! Sunbyte e-Flower SQL Injection Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 28, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor : http://www.sunbyte.net/ + Download :...

Pre MultiVendor E-Commerce Solution XSS

/\ == \ /\ \ /\ \ \ \ XSS ------------------------------------------------------------------------------------------ EOF...

WebSphere 5.7 Commerce 默认账号漏洞

No description provided by source...

Pre MultiVendor E-commerce Solution XSS

No description provided by source. Title: Pre MultiVendor E-commerce Solution XSS Vulnerability Date: 17/12/2009 Author: bi0 Software Link: http://www.preprojects.com/mcart.asp CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111...

E-Store SQL Injection Vulnerability

E-Store SQL Injection Vulnerability Name E-Store Vendor http://www.getaphpsite.com Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-09-03 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III. ANALYSIS IV. SAMPLE CODE...

E-Store SQL Injection Vulnerability

No description provided by source. Name E-Store Vendor http://www.getaphpsite.com Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-09-03 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III. ANALYSIS IV. SAMPLE CODE ...

E-Store - SQL Injection

E-Store - SQL Injection E-Store SQL Injection Vulnerability Name E-Store Vendor http://www.getaphpsite.com Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-09-03 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III...