WORK System E-Commerce <= 3.0.1 - Remote Include Vulnerability

No description provided by source. ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================...

HappyMall E-Commerce Software 4.3/4.4 Member_HTML.CGI Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7530/info It has been reported that a problem in the HappyMall E-Commerce software package could allow an attacker to pass arbitrary commands through the memberhtml.cgi script. This could lead to attacks against system...

DV Cart Shopping Cart software SQL Injection Vulnerability

No description provided by source. Exploit Title: DV Cart E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.esmistudio.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example...

E-commerce Group (cat.php) SQL Injection Vulnerability

No description provided by source. Exploit Title: E-commerce Group cat.php SQL Injection Vulnerability Date: 2010/05/21 Author:BLack Revenge Software Link: Version: Tested on: CVE : ============================== E-commerce Group cat.php SQL Injection Vulnerability Founder: BLaCk RevenGe Email:-...

multi-lingual e-commerce system 0.2 - Multiple Vulnerabilities

No description provided by source. Salvatore drosophila Fresta + Application: Multi-lingual E-Commerce System + Version: 0.2 + Website: http://sourceforge.net/projects/mlecsphp/ + Bugs: A Local File Inclusion B Information Disclosure C Arbitrary File Upload + Exploitation: Remote + Date: 19 Apr...

Eurofull E-Commerce Mensresp.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12420/info Reportedly Eurofull E-Commerce is affected by a cross-site scripting vulnerability in the 'mensresp.asp' script. This issue is due to a failure of the application to properly sanitize user-supplied input. As a...

Wordpress Plugin E-commerce <= 3.8.4 - SQL Injection Exploit

No description provided by source...

pre multi-vendor shopping malls Multiple Vulnerabilities

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Pre...

QuickCommerce 2.5/3.0,Cart32 2.5 a/3.0,Shop Express 1.0,StoreCreator 3.0 Web Shopping Cart Hidden Form Field Vulnerability

No description provided by source. E-Commerce Exchange QuickCommerce 2.5/3.0,McMurtrey/Whitaker & Associates Cart32 2.5 a/3.0,Shop Express 1.0,StoreCreator 3.0 Web Shopping Cart Hidden Form Field Vulnerability source: http://www.securityfocus.com/bid/1237/info Various shopping cart applications u...

CyberShop Ultimate E-commerce Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16473/info CyberShop Ultimate E-commerce is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

Alisveristr E-commerce Login Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15699/info Alisveristr E-commerce is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successf...

Axis Commerce (E-Commerce System) Stored XSS

No description provided by source. Exploit Title: Axis Commerce E-Commerce System Stored XSS Date: 19.08.2011 Author: Eyup CELIK Software Link: https://github.com/downloads/axis/axiscommerce/axis-0.8.1.zip Version: 0.8.1 and previus Tested on: Apache For Windows ISSUE Vulnerable Modules = Search...

.netCART Settings.XML Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8210/info .netCART is a web based e-commerce and shopping cart site designed for ASP.NET. It has been alleged that .netCART fails to adequately protect the contents of a directory in a default install. It is therefore...

JShop E-Commerce Suite 1.2 Product.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12403/info JShop E-Commerce Suite is affected by a cross-site scripting vulnerability in the 'product.php' script. As a result of this vulnerability, it is possible for a remote attacker to create a malicious link...

Realtor WebSite System E-Commerce idfestival SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------- Realtor WebSite System E-Commerce all files.php SQL Injection Vulnerability -------------------------------------------------------------------------------------------...

McMurtrey/Whitaker & Associates Cart32 3.0/3.1/3.5 DoS Vulnerability

No description provided by source. source : http://www.securityfocus.com/bid/1934/info Cart32 is a shopping cart application for e-commerce enabled sites. Cart32 is subject to a denial of service. When requesting a specially formed URL the application will cause the CPU utilization to spike to...

virtuemart <= 1.1.2 - Multiple Vulnerabilities

No description provided by source. Author: Janek Vind waraxe Date: 24. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-71.html Description of vulnerable software: VirtueMart is an Open Source E-Commerce solution to be used together with a Content Management System CMS...

Wordpress Plugin e-Commerce <= 3.8.6 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress WP e-Commerce plugin = 3.8.6 SQL Injection Vulnerability Date: 2011-09-13 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-e-commerce.3.8.6.zip Version: 3.8.6 tested...

411cc Multiple SQL Injection Vulnerabilities

No description provided by source. =================================================================== 411CC e-Commerce = String' SQL Injection Vulnerabilities =================================================================== My + Author : KnocKout Contact : [email protected] Software info Web...

SmartWin CyberOffice Shopping Cart 2.0 Client Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1734/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. It is possible for a remote user to gain read access to the private...