Cross-Site Request Forgery Vulnerability in the User Center of BBCBuilder E-Commerce System

BBCBuilder e-commerce system is a b2b2c model developed by Yuanfeng Company, which supports the e-commerce system of platform self-supporting and supplier store coexistence mode. A cross-site request forgery vulnerability exists in the user center of the BBCBuilder e-commerce system, which allows...

Cross-Site Request Forgery Vulnerability in TinyShop

TinyShop is an e-commerce system online store system based on the Tiny framework, suitable for businesses and individuals to quickly build a personalized online store. TinyShop is vulnerable to cross-site request forgery. As the program fails to filter user input, an attacker can exploit the...

NetShen E-commerce System Exists IIS Write Permission, Source Code Leakage Vulnerabilities

NetShen Information Technology Beijing Co., Ltd. is a high-tech information security solution, product and service provider integrating technology research and development, manufacturing and comprehensive service. NetShen's e-commerce system suffers from IIS write permission and source code leaka...

Multiple Cross-Site Request Forgery Vulnerabilities in Magento

Magento is a professional open source PHP e-commerce system from Magento, USA, which provides permission management, search engine and payment gateway. Magento has multiple cross-site request forgery vulnerabilities. Allow remote attackers to perform certain unauthorized operations...

redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability

No description provided by source. Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : powered by redmind? or Entwickelt und betrieben von redmind? Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on : Linux IDBlackcoder Dat...

DV Cart Shopping Cart software SQL Injection Vulnerability

No description provided by source. Exploit Title: DV Cart E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.esmistudio.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example...

multi-lingual e-commerce system 0.2 - Multiple Vulnerabilities

No description provided by source. Salvatore drosophila Fresta + Application: Multi-lingual E-Commerce System + Version: 0.2 + Website: http://sourceforge.net/projects/mlecsphp/ + Bugs: A Local File Inclusion B Information Disclosure C Arbitrary File Upload + Exploitation: Remote + Date: 19 Apr...

SiteXpress E-Commerce System Dept.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21059/info SiteXpress E-Commerce System is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow a...

Bonza Digital Cart Script SQL Injection Vulnerability

No description provided by source. Exploit Title: Bonzo Cart E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example...

Axis Commerce (E-Commerce System) Stored XSS

No description provided by source. Exploit Title: Axis Commerce E-Commerce System Stored XSS Date: 19.08.2011 Author: Eyup CELIK Software Link: https://github.com/downloads/axis/axiscommerce/axis-0.8.1.zip Version: 0.8.1 and previus Tested on: Apache For Windows ISSUE Vulnerable Modules = Search...

Cosmoshop 'pwd.cgi'任意文件创建漏洞

Bugtraq ID:66323 CosmoShop是基于Magento的云电商系统。 攻击者可通过使用特制的请求利用该漏洞在服务器上创建任意文件。 0 Cosmoshop 目前没有详细解决方案： http://www.cosmoshop.de/...

E-Commerce system ShopNC multiple vulnerabilities(may be violence getshell)-vulnerability warning-the black bar safety net

Introduction ShopNC is a S is to network city create want to the company's service to business customers in the e-Commerce system, based on PHP5 technology uses the MVC pattern development, this article describes shopnc multiple vulnerabilities combined,can be getshell a little violent-- Any file...

Redmind Online-Shop / E-Commerce System SQL Injection

Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : "powered by redmind�" or "Entwickelt und betrieben von redmind�" Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on : Linux IDBlackcoder Date : September 28th, 2011 Author...

redmind Online-Shop E-Commerce-System - SQL Injection

redmind Online-Shop E-Commerce-System - SQL Injection Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : "powered by redmind�" or "Entwickelt und betrieben von redmind�" Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on :...

redmind Online-Shop / E-Commerce-System - SQL Injection

Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : "powered by redmind�" or "Entwickelt und betrieben von redmind�" Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on : Linux IDBlackcoder Date : September 28th, 2011 Author...

redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : "powered by redmind" or "Entwickelt und betrieben von redmind" Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on :...

DV Cart Shopping Cart software - SQL Injection

DV Cart Shopping Cart software - SQL Injection Exploit Title: DV Cart E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.esmistudio.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input...

CK Cart SQL Injection

Exploit Title: CK Cart E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.ckcart.com/ Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Vulnerable Page: cart.php Example:...

JOT Online Store SQL Injection

Exploit Title: JOT Online Store E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.justonlinetoday.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Vulnerable Page: index.php Example:...

ShopDirector SQL Injection

Exploit Title: ShopDirector E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.polyspaston.com/contentshopdirector.php Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Vulnerable Page:...