MWOpen E-Commerce leggi_commenti.asp Remote SQL Injection

No description provided by source. --------------------------------------------------------------- / | |\ / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

mwopen-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- MWOpen...

MWOpen E-Commerce - 'leggi_commenti.asp' SQL Injection

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- MWOpen...

MWOpen E-Commerce - leggi_commenti.asp SQL Injection

MWOpen E-Commerce - leggicommenti.asp SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

MWOpen E-Commerce leggi_commenti.asp Remote SQL Injection

Exploit for unknown platform in category web applications ========================================================= MWOpen E-Commerce leggicommenti.asp Remote SQL Injection ========================================================= --------------------------------------------------------------- / ...

CVE-2007-5801

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...

Code injection

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...

CVE-2007-5801

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...

CVE-2007-5801

Technical details for CVE-2007-5801 are not publicly available in the provided documents; no affected versions, exploitation details, or fixes are disclosed here. Monitor for updates.

Unfixed XSS vulnerability at yhst-81126207287951.ecommerce-site-search.com

Security researcher Moonbat, has submitted on 08/10/2007 a cross-site-scripting XSS vulnerability affecting yhst-81126207287951.ecommerce-site-search.com, which at the time of submission ranked 77311 on the web according to Alexa. We manually validated and published a mirror of this vulnerability...

[ELEYTT] 3SIERPIEN2007

Eleytt Research www.eleytt.com Overview: ==================== Michal Bucko, Eleytt Shyaam Sundhar R S, Eleytt Credit: ==================== Michal Bucko, Eleytt, www.eleytt.com/michal.bucko Gynvael Coldwind for providing a good example Vulnerability Table =================== 1. Firefox 2.0.0.6...

Sql injection

Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the 1 EmailAdd Username and 2 Pass password parameters. NOTE: some of these details are...

CVE-2007-4121

Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the 1 EmailAdd Username and 2 Pass password parameters. NOTE: some of these details are...

CVE-2007-4121

Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the 1 EmailAdd Username and 2 Pass password parameters. NOTE: some of these details are...

CVE-2007-4121

CVE-2007-4121 relates to multiple SQL injection flaws in admin.aspx across three scripts: E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script. The vulnerability allows remote attackers to inject SQL via the EmailAdd (Username) and Pass (password) parameters, po...

E-commerceScripts ALL Apps (Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script) admin.aspx SQL

A R I A - S E C U R I T Y Vendor: http://www.e-commercescripts.com/dotnet/ E-commerceScripts ALL Apps Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script admin.aspx SQL Injection Username: anything' OR 'x'='x password: whatever you want or anything' OR 'x'='x Credits: Aria-Securit...

osCommerce Online Merchant v2.2 RC1 local include bug

osCommerce Online Merchant v2.2 RC1 local include bug SEVERITY: ========= Normal SOFTWARE: ========= osCommerce Online Merchant v2.2 RC1 http://oscommerce.com/ INFO: ===== osCommerce is an Open Source based online shop e-commerce solution that is available for free under the GNU General Public...

Vulnerability - cpCommerce - XSS

cpcommerce is a FOSS php-based e-commerce shopping cart web application. Exploit: Javascript placed inside a user's "Full Name:" field will not be stripped - it will be added to the database 'as-is' as long as it has no quotations in the string. When the admin goes to the clients view page, the...

miniwebshop2-xss.txt

-=--------------------ADVISORY-------------------=- Mini Web Shop V.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Mini Web Shop -=+ Version: 2 -=+ Vendor's URL: http://obiewebsite.sourceforge.net/o.php?MiniWebShop -=+ Platform:...

[Full-disclosure] Mini Web Shop v.2 vulnerable to XSS

-=--------------------ADVISORY-------------------=- Mini Web Shop V.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Mini Web Shop -=+ Version: 2 -=+ Vendor's URL: http://obiewebsite.sourceforge.net/o.php?MiniWebShop -=+ Platform:...