CVE-2008-2020: Use of Insufficiently Random Values

The CAPTCHA implementation as used in 1 Francisco Burzi PHP-Nuke 7.0 and 8.1, 2 my123tkShop e-Commerce-Suite aka 123tkShop 0.9.1, 3 phpMyBitTorrent 1.2.2, 4 TorrentFlux 2.3, 5 e107 0.7.11, 6 WebZE 0.5.9, 7 Open Media Collectors Database aka OpenDb 1.5.0b4, and 8 Labgab 1.1 uses a codebg.jpg...

CVE-2008-1839

CVE-2008-1839 affects WORK system e-commerce 4.0.9. The vulnerability is described as multiple cross-site scripting (XSS) in module/main.php, exploitable via the (1) day, (2) month, and (3) year parameters. The notes indicate not all provenance is confirmed and details come from third-party sourc...

CVE-2008-1839

Multgiple cross-site scripting XSS vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 day, 2 month, and 3 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-1839: Improper Neutralization of Input During Web Page Generation

Multgiple cross-site scripting XSS vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 day, 2 month, and 3 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...

cpCommerce 1.1.0 (XSS/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== cpCommerce 1.1.0 XSS/LFI Multiple Remote Vulnerabilities ========================================================== AmnPardaz Security Research Team Title: cpCommerce Multiple...

CPCommerce 1.1.0 - Cross-Site Scripting Local File Inclusion

CPCommerce 1.1.0 - Cross-Site Scripting Local File Inclusion www.BugReport.ir AmnPardaz Security Research Team Title: cpCommerce Multiple Vulnerabilities Vendor: http://cpcommerce.cpradio.org Bugs: XSS, SQL Injection , Local File Inclusion Vulnerable Version: 1.1.0 prior versions also may be...

CPCommerce 1.1.0 - Cross-Site Scripting / Local File Inclusion

www.BugReport.ir AmnPardaz Security Research Team Title: cpCommerce Multiple Vulnerabilities Vendor: http://cpcommerce.cpradio.org Bugs: XSS, SQL Injection , Local File Inclusion Vulnerable Version: 1.1.0 prior versions also may be affected Exploitation: Remote with browser Fix: N/A Original...

phpshop081-sql.txt

+¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª-+ Web Application: phpSHOP 0.8.1 SQL Injection Description: SQL Injection in Web E-commerce OpenSource application phpSHOP in login.php script. +¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª-+ author: y2h4ck e-mail: y2h4ck at gmail.com page: http://y2h4ck.wordpress.com...

Debian: Security Advisory (DSA-471)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 471-1 (interchange)

The remote host is missing an update to interchange announced via advisory DSA 471-1. OpenVAS Vulnerability Test $Id: deb4711.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 471-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 150-1 (interchange)

The remote host is missing an update to interchange announced via advisory DSA 150-1. OpenVAS Vulnerability Test $Id: deb1501.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 150-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

MWOpen E-Commerce leggi_commenti.asp Remote SQL Injection

No description provided by source. --------------------------------------------------------------- / | |\ / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

mwopen-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- MWOpen...

MWOpen E-Commerce leggi_commenti.asp Remote SQL Injection

Exploit for unknown platform in category web applications ========================================================= MWOpen E-Commerce leggicommenti.asp Remote SQL Injection ========================================================= --------------------------------------------------------------- / ...

MWOpen E-Commerce - leggi_commenti.asp SQL Injection

MWOpen E-Commerce - leggicommenti.asp SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

MWOpen E-Commerce - 'leggi_commenti.asp' SQL Injection

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- MWOpen...

Code injection

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...

CVE-2007-5801

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...

CVE-2007-5801

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...

CVE-2007-5801

Technical details for CVE-2007-5801 are not publicly available in the provided documents; no affected versions, exploitation details, or fixes are disclosed here. Monitor for updates.