Sistem Biwes Multiple Vulnerability`

=================================================================== Sistem Biwes Multiple Vulnerability =================================================================== Author: eidelweiss @randyarios Product / software: SISTEM BIWES Vendor Site: http://sistembiwes.com/ Product Price: RM240 /...

Sistem Biwes Multiple Vulnerability

Exploit for php platform in category web applications =================================================================== Sistem Biwes Multiple Vulnerability =================================================================== Google Dork: "Powered by sistembiwes.com" Author: eidelweiss @randyario...

Cross site scripting

Cross-site scripting XSS vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the customtext parameter. NOTE: some of these details are obtained from third party...

CVE-2011-5104

CVE-2011-5104 affects the WP e-Commerce plugin (WordPress) in the file wpsc-admin/display-sales-logs.php with a vulnerability in the custom_text parameter, allowing remote attackers to inject arbitrary script/HTML (XSS). The issue is observed in WP e-Commerce 3.8.7.1 and possibly earlier. Remedia...

Cesar Cerrudo on Owning Your CEO

Dennis Fisher talks with Cesar Cerrudo of IOActive Labs about his research project that used Fortune 500 executives’ corporate email addresses as the starting point to gather data about their online activities. Cerrudo found that he was able to map executives’ activities across a wide range of...

WordPress WP E-Commerce Plugin <= 3.8.7.1 - XSS

Because of this vulnerability in wpsc-admin/display-sales-logs.php, the attackers can inject arbitrary web script or HTML via the "customtext" parameter. Solution Update the plugin...

Joomla! Component com_enmasse 1.2.0.4 - SQL Injection

Joomla! Component comenmasse 1.2.0.4 - SQL Injection Exploit Title: Joomla comenmasse Remote Exploit Author: Daniel Barragan "D4NB4R" Español hola, este exploit afecta sitios de ecommerce por lo cual el exploit solo dara una muestra de la extraccion posible de datos, No me hago responsable del us...

LogiSoft Online-Shop / E-Commerce-System Sql Injection/XSS Vulnerabilties

Exploit for php platform in category web applications LogiSoft Online-Shop / E-Commerce-System Sql Injection/XSS Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.logisoft.be/ === Exploit ==...

iBoutique eCommerce 4.0 - Multiple Web Vulnerabilities

iBoutique eCommerce 4.0 - Multiple Web Vulnerabilities Title: ====== iBoutique eCommerce v4.0 - Multiple Web Vulnerabilites Date: ===== 2012-06-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=594 VL-ID: ===== 594 Common Vulnerability Scoring System:...

iBoutique eCommerce 4.0 SQL Injection / Cross Site Scripting

Title: ====== iBoutique eCommerce v4.0 - Multiple Web Vulnerabilites Date: ===== 2012-06-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=594 VL-ID: ===== 594 Common Vulnerability Scoring System: ==================================== 8 Introduction: =============...

iBoutique eCommerce v4.0 - Multiple Web Vulnerabilities

Document Title: =============== iBoutique eCommerce v4.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=594 Release Date: ============= 2012-06-08 Vulnerability Laboratory ID VL-ID: ==================================== 594...

Jabong.com Cross Site Scripting

Website: www.jabong.com Vulnerability: Session Hijacking VIA XSS Criticality: Moderate to Risky Author: Karthik R a.k.a 3psil0nlambda www.epsilonlambda.wordpress.org --------------------------------------------------- About the site: Jabong.com is a young and vibrant company that aims to provide...

ecmall local packet letter(0day)-vulnerability warning-the black bar safety net

ECMall community e-Commerce systemreferred to as ECMallis Shanghai commercial school network Technology Co., Ltd. following the ECShop after the launch of yet another e-Commerce sister products. Recently saw dark clouds on the storm a ecmall full version file package letter vulnerability, its own...

Expert Warns That WordPress Autoupdate Feature Used To Infect Blogs With Malware

UPDATE: More than 1,000 WordPress blogs are currently being infected by a form of malware that has ‘piggybacked’ its way onto the blogging platform using the WordPress automatic update function, a security researcher has discovered. According to Denis Sinegubko, founder of Unmask Parasites, the...

VirtueMart 2.0.2 Information Disclosure

TITLE ....... VirtueMart 2.0.2 Information Disclosure DATE ........ 06.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://virtuemart.org VERSION ..... 2.0.2 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What is t...

osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities

Title: ====== osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities Date: ===== 2012-04-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=497 VL-ID: ===== 497 Introduction: ============= osCMax is a powerful e-commerce/shopping cart web application. There are many...

Microsoft Commerce Server Installed

Microsoft Commerce Server, an e-commerce platform running on .NET, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58650; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

osCmax Shop CMS 2.5.1 Cross Site Scripting

Title: ====== osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities Date: ===== 2012-04-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=497 VL-ID: ===== 497 Introduction: ============= osCMax is a powerful e-commerce/shopping cart web application. There are many...

Bonza-Cart E-Commerce - SQLi/XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities

Document Title: =============== osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=497 Release Date: ============= 2012-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 497...