osCommerce unprotected admin directory

This host is running osCommerce, a widely installed open source shopping e-commerce solution. See http://www.oscommerce.com for more information. The store admin directory on your server needs to be password protected using .htaccess. Most of the time the server you are hosting your store on has...

PT-2009-1778 · Xt · Xt:Commerce

Name of the Vulnerable Software and Affected Versions: xt:Commerce versions prior to 3.0.4 Sp2.1 Description: The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors when magic quotes gpc is enabled and the SEO URLs are activated. Recommendations: For versions...

PT-2009-1520 · Xt:Commerce · Xt:Commerce

Name of the Vulnerable Software and Affected Versions: xt:Commerce versions 3.0.4 and earlier Description: The issue allows remote attackers to hijack web sessions by setting the XTCsid parameter in the shopping cart.php file. This enables attackers to take control of user sessions, potentially...

PT-2009-1519 · Xt · Xt:Commerce

Name of the Vulnerable Software and Affected Versions: xt:Commerce versions 3.0.4 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in the advanced...

Code injection

Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 aka 1.1.0.1 have unknown impact and attack vectors, related to the 1 bankwire module, 2 cheque module, and other components...

CVE-2008-5791

Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 aka 1.1.0.1 have unknown impact and attack vectors, related to the 1 bankwire module, 2 cheque module, and other components...

CVE-2008-5791

Technical details about CVE-2008-5791 are not publicly available in the provided documents. No concrete affected products, components, versions, or remediation are specified. Monitor for updates from the connected sources.

CVE-2008-5791

Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 aka 1.1.0.1 have unknown impact and attack vectors, related to the 1 bankwire module, 2 cheque module, and other components...

CVE-2008-5609

SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-5609

CVE-2008-5609 describes an SQL injection vulnerability in the TYPO3 Commerce extension (versions 0.9.6 and earlier). The underlying issue is a SQL injection flaw that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The affected product is TYPO3 with the Commerce...

CVE-2008-5609

SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-5223

SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

Sql injection

SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2008-5223

The CVE-2008-5223 issue affects Airvae Commerce 3.0 via a SQL injection in index.php, exploitable through the pid parameter. The vulnerability is evidenced by multiple references (NVD/NIST, CVE listings) and classed with a high base score (7.5) under CVSSv2: NETWORK attack vector, LOW attack comp...

CVE-2008-5223

SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

premultivendor-sqlcookie.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Pre Multi-Vendor Shopping Malls Multipl...

Joomla! Component VirtueMart Google Base 1.1 - Remote File Inclusion

Joomla! Component VirtueMart Google Base 1.1 - Remote File Inclusion ================================================================================================================================ o VirtueMart Google Base Component 1.1 Remote File Inclusion Vulnerability Software : comgooglebase...

Joomla! Component VirtueMart Google Base 1.1 - Remote File Inclusion

================================================================================================================================ o VirtueMart Google Base Component 1.1 Remote File Inclusion Vulnerability Software : comgooglebase version 1.1 Vendor : www.e-commerce-solution.co.uk Download :...

Wordpress Plugin e-Commerce <= 3.4 Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand99999 . ".php"; no int print INTRO; messy print i know.. - Wordpress Plugin e-Commerce = 3.4 Arbitrary File Upload - Discovered && Coded by: t0pP8uZz Discover...