CVE-2014-9237

SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via a tem:Code element in a SOAP request...

[Appcheck-NG] Unpatched Vulnerabilities in Magento E-Commerce Platform

On April 8th 2014, AppCheck reported several Cross Site Scripting Vulnerabilities in the Magento e-commerce platform via the eBay bug bounty program. eBay responded to inform us that the vulnerabilities had already been reported. However, since more than 6 months have passed and no fix is yet...

Proticaret E-Commerce Script 3.0 - SQL Injection (2)

Proticaret E-Commerce Script 3.0 - SQL Injection 2 Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce script. Abstract Advisory Information:...

Proticaret E-Commerce Script 3.0 - SQL Injection Vulnerability

Proticaret E-Commerce Script version 3.0 suffers from a remote SQL injection vulnerability. Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce...

Proticaret E-Commerce Script 3.0 - SQL Injection (2)

Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce script. Abstract Advisory Information: ======================= BGA Security Team discovered...

Proticaret E-Commerce Script 3.0 SQL Injection

Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce script. Abstract Advisory Information: ======================= BGA Security Team discovered...

Proticaret E-Commerce Script 3.0 - SQL Injection (1)

Proticaret E-Commerce Script 3.0 - SQL Injection 1 Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce script. Abstract Advisory Information:...

Proticaret E-Commerce Script 3.0 - SQL Injection (1)

Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce script. Abstract Advisory Information: ======================= BGA Security Team discovered...

PayPal Arbitrary Code Execution

Document Title: =============== PayPal Inc - Filter Bypass & Arbitrary Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=936 Video: http://www.vulnerability-lab.com/getcontent.php?id=1275 Vulnerability Magazine:...

PayPal MultiOrder Shipping Cross Site Scripting

Document Title: =============== PayPal Inc BugBounty 107 MultiOrder Shipping API - Persistent History Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1048 PayPal Security UID: dq115aYq Release Date: ============= 2014-10-27 Vulnerability...

LiteCart Security Advisory - Multiple XSS Vulnerabilities - CVE-2014-7183

Information ----------- Advisory by Netsparker. Name: Multiple XSS Vulnerabilities in LiteCart Affected Software : LiteCart Affected Versions: 1.1.2.1 and possibly below Vendor Homepage : http://www.litecart.net Vulnerability Type : Cross-site Scripting Severity : Important CVE-ID: CVE-2014-7183...

SA-CONTRIB-2014-101 - Ubercart - Cross Site Request Forgery

The Ubercart module provides a shopping cart and e-commerce features for Drupal. Cross Site Request Forgery CSRF The country administration links are not properly protected. A malicious user could trick a store administrator into enabling or disabling a country by getting them to visit a...

LiteCart 1.1.2.1 Cross Site Scripting

Information ----------- Advisory by Netsparker. Name: Multiple XSS Vulnerabilities in LiteCart Affected Software : LiteCart Affected Versions: 1.1.2.1 and possibly below Vendor Homepage : http://www.litecart.net Vulnerability Type : Cross-site Scripting Severity : Important CVE-ID: CVE-2014-7183...

PayPal Inc iOS Mobile 4.6.0 Input Validation

Document Title: =============== PayPal Inc 86 iOS 4.6 - Validation & Design Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=915 PayPal Security UID: eff8aq Release Date: ============= 2014-09-30 Vulnerability Laboratory ID VL-ID:...

Paypal MOS API - Bypass & Persistent XML Vulnerability

Document Title: =============== Paypal MOS API - Bypass & Persistent XML Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1129 PayPal Security UID: TM13a2uL Release Date: ============= 2014-10-14 Vulnerability Laboratory ID VL-ID:...

Paypal MOS API - Bypass & Persistent XML Vulnerability

Document Title: =============== Paypal MOS API - Bypass & Persistent XML Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1129 PayPal Security UID: TM13a2uL Release Date: ============= 2014-10-14 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #98 MOS - Persistent Settings Vulnerability

Document Title: =============== PayPal Inc BB 98 MOS - Persistent Settings Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=983 Release Date: ============= 2014-10-13 Vulnerability Laboratory ID VL-ID: ==================================== 98...

e-Commerce Vision Design Group Code injection Vulnerability

Exploit for php platform in category web applications Exploit Title: e-Commerce Vision Design Group Code injection Date: 10/09/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : email protected | FB.Com/Pakistani1337 Greetz : KhantastiC - b0x - 1337 - H4x0rl1f3 - Shadow008 - Invectus...

PayPal Inc BB #96 - Persistent Tags Vulnerability

Document Title: =============== PayPal Inc BB 96 - Persistent Tags Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=954 PayPal Security UID: apf87gW Release Date: ============= 2014-10-08 Vulnerability Laboratory ID VL-ID:...

PayPal Service Manager Script Insertion

Document Title: =============== PayPal Inc Bug Bounty 71 PPM - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=870 PayPal Security UID: Roc83bl Release Date: ============= 2014-09-24 Vulnerability Laboratory ID VL-ID:...