CVE-2008-0281

SQL injection vulnerability in liste.php in ID-Commerce 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idFamille parameter...

CVE-2008-0281

CVE-2008-0281 is a SQL injection vulnerability in liste.php of ID-Commerce 2.0 and earlier, where the idFamille parameter allows remote attackers to execute arbitrary SQL commands. The public records identify the affected component as ID-Commerce 2.0 (and earlier) with a likely input vector via i...

ID-Commerce 'liste.php' SQL注入漏洞

BUGTRAQ ID: 27220 CNCAN ID:CNCAN-2008011404 ID-Commerce是一款基于PHP的WEB应用程序。 ID-Commerce不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'liste.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 ID-Commerce 2.0 厂商解决方案 目前没有解决方案提供： http://www.id-commerce.com/...

[Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001

Blind SQL injection : google : inurl:'liste.php?idFamille=' http://URL/liste.php?idFamille=120or201=1 http://URL/liste.php?idFamille=120or201=0...

ID-Commerce 2.0 - liste.php SQL Injection

ID-Commerce 2.0 - liste.php SQL Injection source: https://www.securityfocus.com/bid/27220/info ID-Commerce is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

[Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001

Blind SQL injection : check : inurl:'liste.php?idFamille=' http://URL/liste.php?idFamille=120or201=1 http://url/liste.php?idFamille=120or201=1 http://URL/liste.php?idFamille=120or201=0 http://url/liste.php?idFamille=120or201=0...

[Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001

ID-Commerce Security Advisory - SLR-2007-001 +------------------------------------------------------------------------+ | Product | ID-Commerce | |--------------------+---------------------------------------------------| | Summary | SQL Injection Vulnerabilities |...

ID-Commerce 2.0 - 'liste.php' SQL Injection

source: https://www.securityfocus.com/bid/27220/info ID-Commerce is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

MWOpen E-Commerce leggi_commenti.asp Remote SQL Injection

No description provided by source. --------------------------------------------------------------- / | |\ / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

mwopen-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- MWOpen...

MWOpen E-Commerce - leggi_commenti.asp SQL Injection

MWOpen E-Commerce - leggicommenti.asp SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

MWOpen E-Commerce leggi_commenti.asp Remote SQL Injection

Exploit for unknown platform in category web applications ========================================================= MWOpen E-Commerce leggicommenti.asp Remote SQL Injection ========================================================= --------------------------------------------------------------- / ...

MWOpen E-Commerce - 'leggi_commenti.asp' SQL Injection

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- MWOpen...

Microsoft Office Web Component Memory Access Violation Denial of Service Vulnera

Microsoft Office Web组件一款基与Web的数据透视表控件。 Microsoft Office Web包含的ActiveX控件存在设计错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的EWB页，诱使用户访问，可导致对应用程序进行拒绝服务攻击。 Microsoft Office Web Components 2003 0 + Microsoft BizTalk Server 2002 Developer Edition + Microsoft BizTalk Server 2002 Enterprise Edition + Microsoft Commer...

Code injection

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...

CVE-2007-5801

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...

CVE-2007-5801

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...

CVE-2007-5801

Technical details for CVE-2007-5801 are not publicly available in the provided documents; no affected versions, exploitation details, or fixes are disclosed here. Monitor for updates.

Unfixed XSS vulnerability at www.manhattancc.org

Security researcher MaXWeL, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.manhattancc.org, which at the time of submission ranked 322896 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is...

Unfixed XSS vulnerability at yhst-81126207287951.ecommerce-site-search.com

Security researcher Moonbat, has submitted on 08/10/2007 a cross-site-scripting XSS vulnerability affecting yhst-81126207287951.ecommerce-site-search.com, which at the time of submission ranked 77311 on the web according to Alexa. We manually validated and published a mirror of this vulnerability...