PT-2013-2107

Name of the Vulnerable Software and Affected Versions CS-Cart versions prior to 3.0.6 Description The issue allows remote attackers to modify the payment recipient when PayPal Standard Payments is configured. This is achieved by altering the merchant's e-mail address, potentially allowing an...

CS-Cart v3.0.4 configured with PayPal Standard Payments design vulnerability

Overview CS-Cart v3.0.4 and possibly other versions configured with PayPal Standard Payment is susceptible to a client-side attack that results in an attacker purchasing items without having to pay for them. Description It has been reported that CS-Cart v3.0.4 configured with PayPal Standard...

CVE-2012-3161

CVE-2012-3161 affects the Oracle Agile PLM Framework component within Oracle Supply Chain Products Suite 9.3.1.1. Description in the primary record states an unspecified vulnerability that could allow remote attackers to affect integrity via unknown vectors related to the Web Client (CS). Connect...

PT-2012-4528

Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite version 9.3.1.1 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Web Client CS in the Oracle Agile PLM Framework component...

PT-2012-2074

Name of the Vulnerable Software and Affected Versions Avaya Aura Application Server 5300 versions 1.x before 1.0.2 Avaya Aura Application Server 5300 version 2.0 before Patch Bundle 10 Description The issue is related to a stack-based buffer overflow in the cstore.exe component of the Media...

NACElink CS Manager - Persistent Web Vulnerability

Exploit for php platform in category web applications Title: ====== NACElink CS Manager - Persistent Web Vulnerability Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ============= NACElink Career Services Manager CSM™ offers everything you need to...

Dolphin CS 1.5 Android|iPhone - Multiple Vulnerabilities

Document Title: =============== Dolphin CS 1.5 Android|iPhone - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=566 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 56...

Dolphin CS 1.5 Android|iPhone - Multiple Vulnerabilities

Document Title: =============== Dolphin CS 1.5 Android|iPhone - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=566 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 56...

NACElink CS Manager - Persistent Web Vulnerability

Document Title: =============== NACElink CS Manager - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=488 Release Date: ============= 2012-05-16 Vulnerability Laboratory ID VL-ID: ==================================== 488 Comm...

NACElink CS Manager - Persistent Web Vulnerability

Document Title: =============== NACElink CS Manager - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=488 Release Date: ============= 2012-05-16 Vulnerability Laboratory ID VL-ID: ==================================== 488 Comm...

ServerPro Web Hosting Defaced by Team L0g!cs

ServerPro Web Hosting Defaced by Team L0g!cs Web hosting provider ServerPro has been compromised and completely defaced by hacking group named "Team L0g!cs". ServerPro boasts to have over 200,000 clients over a 10 year stand. Shown Defacement page that showcases information about the hack and the...

JqueryUpload large file upload arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

Guess the solutions to catalog, direct access to the default. aspx you may need to modify the parameter uploadid,the specific capture can be seen, can not make the undefined） 2. Test upload, the capture 3. Modify the Upload Directory can be arbitrarily specified 4. Guessing file name: the server...

Cs-Cart 2.2.1 SQL Injection

. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG - Exploit Title: Cs-Cart Ver 2.2.1 products.php Sql Injection Vulnerability - Author: Net.Edit0r - Home : Black-HG.Org - Version: 2.2.1 - Software Link:...

CS-Cart 2.2.1 - 'products.php' SQL Injection

source: https://www.securityfocus.com/bid/49378/info CS-Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

CS-Cart 2.2.1 - products.php SQL Injection

CS-Cart 2.2.1 - products.php SQL Injection source: https://www.securityfocus.com/bid/49378/info CS-Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

CS Cart 1.3.3 Cross Site Scripting

Exploit Title: CS CART 1.3.3 INSTALL.PHP XSS Date: 2010-09-08 Author: LogicGate Software Link: http://cs-cart.smartcode.com/ Version: 1.3.3 Tested on: N/A CVE : N/A If "install.php" was not removed after installation simply make an html file with the following code and replace by the PATH to...

CS Cart 1.3.3 (install.php) Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ============================================================== CS Cart 1.3.3 install.php Cross Site Scripting Vulnerability ============================================================== Exploit Title: CS CART 1.3.3 INSTALL.PHP XSS Date:...

CS-Cart 1.3.3 - 'install.php' Cross-Site Scripting

Exploit Title: CS CART 1.3.3 INSTALL.PHP XSS Date: 2010-09-08 Author: LogicGate Software Link: http://cs-cart.smartcode.com/ Version: 1.3.3 Tested on: N/A CVE : N/A If "install.php" was not removed after installation simply make an html file with the following code and replace by the PATH to...

CS-Cart 1.3.3 - install.php Cross-Site Scripting

CS-Cart 1.3.3 - install.php Cross-Site Scripting Exploit Title: CS CART 1.3.3 INSTALL.PHP XSS Date: 2010-09-08 Author: LogicGate Software Link: http://cs-cart.smartcode.com/ Version: 1.3.3 Tested on: N/A CVE : N/A If "install.php" was not removed after installation simply make an html file with t...

Cisco CHAP Authentication Vulnerabilities - Cisco Systems

A serious security vulnerability bug ID CSCdi91594 exists in PPP CHAP authentication in all "classic" Cisco IOS software versions the software used on Cisco non-switch products with product numbers greater than or equal to 1000, on the AGS/AGS+/CGS/MGS, and on the CS-500, but not on Catalyst...