osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities

Document Title: =============== osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=497 Release Date: ============= 2012-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 497...

Flatnux CMS 2011 08.09.2 CSRF / XSS / Directory Traversal

Title: ====== Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities Date: ===== 2012-04-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=487 VL-ID: ===== 487 Introduction: ============= Flatnux is no database CMS for accessible websites, corporate websites, e-commer...

Iciniti Store - SQL Injection

Sense of Security - Security Advisory - SOS-12-003 Release Date. 06-Mar-2012 Last Update. - Vendor Notification Date. 28-Jul-2011 Product. Iciniti Store Platform. Windows Affected versions. 4.3.3683.31484 verified, and possibly others Severity Rating. High Impact. Manipulation of data Attack...

Redtienda E-Commerce 2.0 SQL Injection

Title : Redtienda E-Commerce 2.0 SQLi Vulnerability Date : 2/23/2012 Author : ITTIHACK http://ittihack.com Vendor : http://www.redtienda.com/english Software link : http://www.redtienda.com/english/getstarted.php Free Demo : http://manager.redtienda.net user:store - pass:beach65 Version : 2.0...

SQL Injection Vulnerability in Batavi 1.1.2

Information -------------------- Name : SQL Injection Vulnerability in Batavi Software : Batavi 1.1.2 and possibly below. Vendor Homepage : http://www.batavi.org Vulnerability Type : SQL Injection Severity : Critical Researcher : Onur Y?lmaz Advisory Reference : NS-12-003 Description...

Batavi 1.1.2 SQL Injection

Information -------------------- Name : SQL Injection Vulnerability in Batavi Software : Batavi 1.1.2 and possibly below. Vendor Homepage : http://www.batavi.org Vulnerability Type : SQL Injection Severity : Critical Researcher : Onur Yılmaz Advisory Reference : NS-12-003 Description...

OSCommerce v3.0.2 - Persistent Cross Site Vulnerability

Document Title: =============== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability References Source: ==================== http://www.cnnvd.org.cn/vulnerability/show/cvid/2012020057 ID: CNNVD-201202-057 Release Date: ============= 2012-02-01 Vulnerability Laboratory ID VL-ID:...

SolGens E-Commerce 'cid' And 'pid' Parameters SQLi Vulnerability

SolGens E-Commerce is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SolGens E-Commerce SQL Injection

SolGens E-Commerce - SQL Injection Vulnerability x Author : thecybernuxbie x Home : www.thecybernuxbie.com x E-mail : [email protected] x Found : 23 January 2012. x Tested : Windows 7 Ultimate. x Tools : Hvj + SQLi Manual. x Dork : inurl:"/categoryproducts.php?cid=" x Vuln Exploit Report:...

PHPB2B 'q' Parameter Cross-Site Scripting Vulnerability

PHPB2B is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Zingiri 2.2.3 Code Execution

get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45. $selectedDocuments$key = $POST'value'; 46. $sessionAction-set$selectedDocuments; 47. 48. 49. echo...

Joomla Component Alameda (com_alameda) SQL Injection

No description provided by source. Joomla Component Alameda comalameda SQL Injection Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 1 Nov , 2011 Software Information + Vendor :...

Redmind Online-Shop / E-Commerce System SQL Injection

Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : "powered by redmind�" or "Entwickelt und betrieben von redmind�" Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on : Linux IDBlackcoder Date : September 28th, 2011 Author...

redmind Online-Shop / E-Commerce-System SQL injection flaws and fixes-vulnerability warning-the black bar safety net

Title: redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Software address: Test platform: Linux IDBlackcoder Author: MbahSemar www.92hack.net The defect file: http://www.xxxx.net/product.php?prodID=SQLi Example http://www.xxx.net/product.php?prodID=9999 and 1=2 union select...

redmind Online-Shop / E-Commerce-System - SQL Injection

Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : "powered by redmind�" or "Entwickelt und betrieben von redmind�" Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on : Linux IDBlackcoder Date : September 28th, 2011 Author...

redmind Online-Shop E-Commerce-System - SQL Injection

redmind Online-Shop E-Commerce-System - SQL Injection Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : "powered by redmind�" or "Entwickelt und betrieben von redmind�" Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on :...

redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability Google Dork : "powered by redmind" or "Entwickelt und betrieben von redmind" Software Link : http://www.redmind.de/online-shop.html Version : N/A Tested on :...

WordPress WP e-Commerce插件"cs1"参数SQL注入漏洞

BUGTRAQ ID: 49612 WordPress WP e-Commerce是基于WP和Web 2.0技术开发的一款电子商务购物车插件程序。 WordPress WP e-Commerce插件在"cs1"参数过滤用户数据时存在SQL注入漏洞，远程攻击者可利用此漏洞控制应用程序，访问或修改数据。 WordPress WP e-Commerce 3.8.6 厂商补丁： WordPress --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://wordpress.org/...

Drupal CMS v7.5.x - Multiple Web Vulnerabilities

Document Title: =============== Drupal CMS v7.5.x - Multiple Web Vulnerabilities References Source: ==================== Released on the german ePost Security Cup http://www.deutschepost.de/dpag?lang=deEN&xmlFile=link10227921022790 Release Date: ============= 2011-09-17 Vulnerability Laboratory I...

WordPress e-Commerce Plugin <= 3.8.6 - SQL Injection

This WordPress e-Commerce plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...