FS Trademe Clone - id SQL Injection

FS Trademe Clone - id SQL Injection Exploit Title: FS Trademe Clone - 'id' SQL Injection Date: 2017-10-24 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/trademe-clone/ Version: 24 October 17 Tested on: Kali Linux 2.0 | Mac OS...

PHP Multi Vendor Script 1.02 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PHP Multi Vendor Script v1.02 - 'sid' Parameter SQL Injection Date: 2017-09-28 Exploit Author: 8bitsec Vendor Homepage: http://www.dexteritysolution.com/ Software Link:...

Why ArtsSEC decided to partner with Wallarm

by Maximiliano Soler, @maxisoler by Maximiliano Soller, CTO of ArtsSEC The greatest thing with partnerships is how well the organisations’ expertise complement each other. Our partnership with Wallarm has incredibly exceeded our expectations in their innovation and expertise in web application...

Magento 1.9.0.1 Cross-Site Scripting Vulnerability

Magento Web E-Commerce Platform is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Secure E-commerce Script 1.02 - sid Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Secure E-commerce Script v1.02 - SQL Injection Exploit Author: 8bitsec Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 1.02 Tested on: Kali...

Secure E-commerce Script 1.02 - sid SQL Injection

Secure E-commerce Script 1.02 - sid SQL Injection Exploit Title: Secure E-commerce Script v1.02 - SQL Injection Date: 2017-09-22 Exploit Author: 8bitsec Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 1.02...

Secure E-Commerce Script 1.02 SQL Injection

Exploit Title: Secure E-commerce Script v1.02 - SQL Injection Date: 2017-09-22 Exploit Author: 8bitsec Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 1.02 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email:...

Secure E-commerce Script 1.02 - 'sid' SQL Injection

Exploit Title: Secure E-commerce Script v1.02 - SQL Injection Date: 2017-09-22 Exploit Author: 8bitsec Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 1.02 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email:...

Cross site scripting

Cross-site scripting XSS vulnerability in Magento E-Commerce Platform 1.9.0.1...

CVE-2014-9758

Cross-site scripting XSS vulnerability in Magento E-Commerce Platform 1.9.0.1...

CVE-2014-9758

CVE-2014-9758 is a cross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1. Affected component: Magento 1.9.0.1 web application. Root cause: XSS in the platform. Impact per sources: Confidentiality LOW, Integrity LOW, Availability NONE (CVSS3.1); Attack vector NETWORK, Use...

CVE-2014-9758

Cross-site scripting XSS vulnerability in Magento E-Commerce Platform 1.9.0.1...

ICSiteBuilder 1.1 SQL Injection

Exploit Title: Website Builder Script With e-Commerce 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/site-builder-script.htm Demo: http://icloudcenter.net/demos/icsitebuilder/ Version: 1.1 Category: Webapps...

ICSiteBuilder 1.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Website Builder Script With e-Commerce 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/site-builder-script.htm Demo:...

ICSiteBuilder 1.1 - SQL Injection

Exploit Title: Website Builder Script With e-Commerce 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/site-builder-script.htm Demo: http://icloudcenter.net/demos/icsitebuilder/ Version: 1.1 Category: Webapps...

Harbin Fengteng E-commerce Co., Ltd. SQL injection vulnerability exists in class_id parameter of pic.php page of Fengteng E-commerce station building system.

Fengteng e-commerce website building system is a website building system. Harbin Fengteng E-commerce Co., Ltd. fengteng e-commerce station building system pic.php page classid parameter SQL injection vulnerability, an attacker can exploit the vulnerability to obtain database sensitive information...

iWebShop open source mall system toSeller parameter SQL injection vulnerability

iWebShop is an open source WEB e-commerce B2B2C platform self-supporting + merchants stationed station-building system based on PHP language + MYSQL database development, using the MVC architecture Yii framework thinking design pattern carefully designed a product. iWebShop open source mall syste...

Superior and safe user experiences with the Akamai Cloud Delivery Platform

Your customers are unique and they all expect fast, secure, personalized digital experiences. They are spread across the world, in regions of varying network connectivity, utilize a plethora of devices and screen sizes - making it challenging to deliver your experiences. By delivering 95 Exabytes...

PayPal Inc BB #149 - (Gift) Insufficient Authentication

Document Title: =============== PayPal Inc BB 149 - Gift Insufficient Authentication References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1973 ID EIBBP-34368 Release Date: ============= 2017-06-20 Vulnerability Laboratory ID VL-ID:...

Credit Card Breach at Buckle Stores

The Buckle Inc., a clothier that operates more than 450 stores in 44 U.S. states, disclosed Friday that its retail locations were hit by malicious software designed to steal customer credit card data. The disclosure came hours after KrebsOnSecurity contacted the company regarding reports from...