8052 matches found
PHP Live! 3.2.2 - questid SQL Injection (1)
PHP Live! 3.2.2 - questid SQL Injection 1 !Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to yo...
PHP Live! 3.2.2 - 'questid' SQL Injection (1)
!Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your website. !SQL Injection! Code:...
ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability
ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-006.html February 12, 2008 -- CVE ID: CVE-2008-077 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 Internet Explorer 7 --...
osCommerce Customer Testimonials customer_testimonials.php testimonial_id Parameter SQL Injection
The remote host is running Customer Testimonials, a third-party addon for the open source e-commerce system osCommerce. The version of Customer Testimonials installed on the remote host fails to sanitize user input to the 'testimonialid' parameter of the 'customertestimonials.php' script before...
Sql injection
SQL injection vulnerability in customertestimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonialid parameter...
CVE-2008-0719
SQL injection vulnerability in customertestimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonialid parameter...
CVE-2008-0719
The CVE-2008-0719 entry describes an SQL injection vulnerability in the customer_testimonials.php script of the osCommerce Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2. The flaw allows remote attackers to manipulate database queries via the testimonial_id parameter, po...
CVE-2008-0719
SQL injection vulnerability in customertestimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonialid parameter...
CVE-2008-0719: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in customertestimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonialid parameter...
oscom-sql.txt
osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...
osCommerce Addon Customer Testimonials 3.1 SQL Injection Vulnerability
No description provided by source. osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...
osCommerce Addon Customer Testimonials 3.1 - SQL Injection
osCommerce Addon Customer Testimonials 3.1 - SQL Injection osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...
osCommerce Addon Customer Testimonials 3.1 - SQL Injection
osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...
Unfixed XSS vulnerability at www.hobbytoys.it
Security researcher RedTuning, has submitted on 23/01/2008 a cross-site-scripting XSS vulnerability affecting www.hobbytoys.it, which at the time of submission ranked 576780 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/01/2008. It is...
[waraxe-2008-SA#063] - Information Leakage in Kayako SupportSuite 3.11.01
waraxe-2008-SA063 - Information Leakage in Kayako SupportSuite 3.11.01 =============================================================================== Author: Janek Vind "waraxe" Date: 21. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-63.html Target software description...
xcart-rfi.txt
xCart Remote file inclusion Download script : http://www.x-cart.com// Discovered By : aLiiF a.k.a arif @debuteam 07/09/2007 HomePage : http://www.debuteam.net// Thx to : Debu Newbie Payment Yogac nyubi Rozi ^S0ng0ku^ Kuris Sonix Toxicity newbi3 R4yn4ld0 DisJocKey s3ng0k homeedition Holong...
EnterpriseDB Advanced Server 8.2 Unitialized Pointer
EnterpriseDB Advanced Server 8.2 Unitialized Pointer ---------------------------------------------------- Product Description: EnterpriseDB is a comercial relational database management system based on PostgreSQL. Vulnerable Versions: EnterpriseDB Advanced Server 8.2 in all supported operative...
JVN#43615794 Yayoi Kaikei improper handling of credential information
Yayoi Kaikei Quick Navigator makes the user log into the vendor's server, and sends the user credentials unencrypted. Impact By monitoring the communication between Quick Navigator and the vendor's server, an attacker can obtain the customer number and the phone number to impersonate the user on...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and attack vectors, related to 1 APPS04, 2 APPS05, and 3 APPS06 in a Oracle Application Object Library, 4 APPS07 in Oracle Customer Intelligence, 5 APPS08 in Oracle Payments, 7 APPS10 in Oracle Human...