CVE-2006-5777

Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged functions via a non-empty finame parameter to 1 addnewcont.php, 2 adminpassw.php, 3 amministrazione.php, 4 artins.php, 5 bgcolor.php, 6 cancartcat.php, 7 canccat.php, 8 cancelart.php...

CVE-2006-5777

CVE-2006-5777 affects Creasito E-Commerce Content Manager 1.3.08. The vulnerability allows remote attackers to bypass authentication and perform privileged functions by supplying a non-empty finame parameter to a long list of admin scripts (e.g., addnewcont.php, adminpassw.php, amministrazione.ph...

Creasito E-Commerce Content Manager (admin) Authentication Bypass

Exploit for unknown platform in category web applications 0day.today 2018-04-10...

Creasito E-Commerce Content Manager (admin) Authentication Bypass

No description provided by source. ============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================...

Creasito E-Commerce Content Manager - admin Authentication Bypass

Creasito E-Commerce Content Manager - admin Authentication Bypass ============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass...

Creasito E-Commerce Content Manager - 'admin' Authentication Bypass

============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================ Product............: Creasito E-Commerce Conten...

Re: Multiple XSS Vulnerabilities in Zen Cart 1.3.5

Full Disclosure Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0003 Status: Full Date: 2006/9/27 Summary: Armorize-ADV-2006-0003 discloses multiple cross-site scripting vulnerabilities that are found in Zen Cart, which is a PHP e-commerce shopping program and is Built on a...

CVE-2006-4969

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

CVE-2006-4970

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4970

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4969

CVE-2006-4969 refers to multiple PHP remote file inclusion vulnerabilities in the WAHM E-Commerce Pie Cart Pro. The issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the Inc_Dir parameter across numerous PHP files (e.g., affiliates.php, orders.php, events.php, i...

CVE-2006-4970

The CVE-2006-4970 issue is a PHP remote file inclusion vulnerability in enc/content.php of WAHM E-Commerce Pie Cart Pro. An attacker can cause remote code execution by supplying a crafted URL in the Home_Path parameter. The vulnerability affects WAHM E‑Commerce Pie Cart Pro products as described,...

CVE-2006-4969

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

CVE-2006-4360

Cross-site scripting XSS vulnerability in E-commerce 4.7 for Drupal before file.module 1.37.2.4 20060812 allows remote authenticated users with the "create products" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-4360

The CVE-2006-4360 entry concerns the Drupal-based E-commerce 4.7 module vulnerability: before file.module 1.37.2.4 (20060812), remote authenticated users with the "create products" permission can inject arbitrary web script or HTML via unspecified vectors. The affected software is E-commerce 4.7 ...

CVE-2006-4360

Cross-site scripting XSS vulnerability in E-commerce 4.7 for Drupal before file.module 1.37.2.4 20060812 allows remote authenticated users with the "create products" permission to inject arbitrary web script or HTML via unspecified vectors...

[SA21604] Drupal E-commerce Module Script Insertion Vulnerabilities

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

E-commerce Cross site scripting vulnerability

It is possible for a malicious user with the 'create products' permission to insert and execute XSS Cross Site Scripting, due to lack of validation on output. This may lead to administrator access if certain conditions are met. Learn more about XSS on Wikipedia. The create products permission is...

CVE-2006-4121

PHP remote file inclusion vulnerability in owimg.php3 in See-Commerce 1.0.625 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-4121

CVE-2006-4121 describes a PHP remote file inclusion in See-Commerce 1.0.625 and earlier. The flaw is in owimg.php3 and allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Affected software: See-Commerce (version 1.0.625 and earlier). Underlying cause: unvalidate...