EUVD-2005-4609

Malware in sbrugna...

EUVD-2010-4598

Malware in sbrugna...

EUVD-2006-5149

Malware in sbrugna...

Digishop 4.0 Cart.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20297/info digiSHOP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have arbitrary script code execute in the browser of an...

digiSHOP 2.0.2 - SQL Injection Vulnerability

No description provided by source. ----------------------------------- TM | | | Y | | | | |. 1 ||||.| | | | |. | -|. |-' | |: | | |: | | |::.|:. | |::.| | --- ---' ---' | Private Place Of 0days | ----------------------------------- ^Exploit Title : ^Date : 23/7/2010 ^Vendor Site :...

idev-DigiShop 2.0 Cross Site Request Forgery

Exploit Title: idev-DigiShop 2.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-digishop/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com ShowShowHide...

idev-DigiShop 2.0 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: idev-DigiShop 2.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-digishop/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com ShowShowHide 0day.today...

CVE-2010-4633

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1...

Sql injection

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1...

CVE-2010-4633

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1...

CVE-2010-4633

The CVE-2010-4633 entry concerns digiSHOP 2.0.2: a SQL injection in cart.php via the id parameter, enabling remote arbitrary SQL execution. Root cause is improper handling of the id input leading to injection; impact is partial confidentiality/integrity/availability compromise as per description....

PT-2010-5597

Name of the Vulnerable Software and Affected Versions digiSHOP version 2.0.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "cart.php" file. Recommendations For digiSHOP version 2.0.2, consider restricting access to th...

CVE-2010-4633: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1...

digiSHOP 2.0.2 SQL Injection

----------------------------------- TM | | | Y | | | | |. 1 ||||.| | | | |. | -|. |-' | |: | | |: | | |::.|:. | |::.| | --- ---' ---' | Private Place Of 0days | ----------------------------------- ^Exploit Title : ^Date : 23/7/2010 ^Vendor Site : http://digishop.digisoft77.com/ ^MOD Version :...

digiSHOP SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================== digiSHOP SQL Injection Vulnerability ==================================== ^Date : 23/7/2010 ^Vendor Site : http://digishop.digisoft77.com/ ^MOD Version : digiSHOP 2.0.2 ^Author : Silic0n...

digiSHOP 2.0.2 - SQL Injection

digiSHOP 2.0.2 - SQL Injection ----------------------------------- TM | | | Y | | | | |. 1 ||||.| | | | |. | -|. |-' | |: | | |: | | |::.|:. | |::.| | --- ---' ---' | Private Place Of 0days | ----------------------------------- ^Exploit Title : ^Date : 23/7/2010 ^Vendor Site :...

digiSHOP 2.0.2 - SQL Injection

----------------------------------- TM | | | Y | | | | |. 1 ||||.| | | | |. | -|. |-' | |: | | |: | | |::.|:. | |::.| | --- ---' ---' | Private Place Of 0days | ----------------------------------- ^Exploit Title : ^Date : 23/7/2010 ^Vendor Site : http://digishop.digisoft77.com/ ^MOD Version :...

CVE-2006-5164: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 sortBy or 2 search parameters...

CVE-2006-5164

CVE-2006-5164 affects Sum Effect Software digiSHOP 4.0. Vulnerable component: cart.php. Type: cross-site scripting (XSS). Vectors: remote attackers can craft requests using the (1) sortBy or (2) search parameters to inject arbitrary web script/HTML. Impact: potential script execution in the victi...

CVE-2006-5164

Multiple cross-site scripting XSS vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 sortBy or 2 search parameters...