miniwebshop2-xss.txt

-=--------------------ADVISORY-------------------=- Mini Web Shop V.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Mini Web Shop -=+ Version: 2 -=+ Vendor's URL: http://obiewebsite.sourceforge.net/o.php?MiniWebShop -=+ Platform:...

[Full-disclosure] Mini Web Shop v.2 vulnerable to XSS

-=--------------------ADVISORY-------------------=- Mini Web Shop V.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Mini Web Shop -=+ Version: 2 -=+ Vendor's URL: http://obiewebsite.sourceforge.net/o.php?MiniWebShop -=+ Platform:...

Echo Security Advisory 2007.76

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability...

Company WebSite Builder PRO 1.9.8 (INCLUDE_PATH) RFI Vulnerability

No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion...

Company WebSite Builder PRO 1.9.8 (INCLUDE_PATH) RFI Vulnerability

Exploit for unknown platform in category web applications ================================================================== Company WebSite Builder PRO 1.9.8 INCLUDEPATH RFI Vulnerability ================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y...

Company WebSite Builder PRO 1.9.8 - 'INCLUDE_PATH' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability...

CVE-2007-1423

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to include/includetop.php and certain other PHP scripts...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to include/includetop.php and certain other PHP scripts...

CVE-2007-1423

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to include/includetop.php and certain other PHP scripts...

CVE-2007-1423

The CVE-2007-1423 entry concerns multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier. The root cause is that the g_include parameter used by include/include_top.php (and certain other PHP scripts) can be manipulated to cause local/remote file inclusion, ...

WORK system e-commerce <= 3.0.5 Remote File Inclusion Vulnerability

No description provided by source. Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...

WORK system e-commerce <= 3.0.5 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== WORK system e-commerce = 3.0.5 Remote File Inclusion Vulnerability =================================================================== Rodrigo Duarte WORK system e-commerc...

work system E-Commerce 3.0.5 - Remote File Inclusion

work system E-Commerce 3.0.5 - Remote File Inclusion Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...

work system E-Commerce 3.0.5 - Remote File Inclusion

Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo, link,partner,forum,new,FAQ,event,calendar,invoice,mailing,supplier,RSS,...

shopstorenow-sql.txt

============================= HItamputih Crew ==================== hitamputih Advisory Discovered By : IbnuSina ----------------------------------------------------------- Software: shopstorenow E-commerce Shopping Cart Method: SQL Injection...

CVE-2007-0142

SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

Sql injection

SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

CVE-2007-0142

CVE-2007-0142 describes a SQL injection in orange.asp of ShopStoreNow E-commerce Shopping Cart, exploitable via the CatID parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry lists base metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P, base score 7.5 (HIGH). Th...

CVE-2007-0142

SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

Shopstorenow E-commerce Shopping Cart Orange.ASP SQL注入漏洞

Shopstorenow E-commerce Shopping Cart 是一款基于ASP的WEB应用程序。 Shopstorenow E-commerce Shopping Cart 不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Orange.ASP'脚本对用户提交的'CatID'参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 Shopstorenow E-commerce Shopping Cart 目前没有解决方案提供： http://www.shopstorenow.com...