SiteXpress SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/SiteXpress.txt ----------------------------------------------------------- Software: SiteXpress E-Commerce System Method : SQL Injection PoC:...

SiteXpress E-Commerce System - 'Dept.asp' SQL Injection

source: https://www.securityfocus.com/bid/21059/info SiteXpress E-Commerce System is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

WORK System E-Commerce (g_include) Remote File Inclusion Vulnerability

============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================ Product............: WORK system e-commerce...

WORK System E-Commerce <= 3.0.1 Remote Include Vulnerability

No description provided by source. ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================...

WORK System E-Commerce <= 3.0.1 Remote Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ WORK System E-Commerce .inc"; Vulnerable Files: ------------------ 'index.php' main directory along with many files in the './administration/module' and './module' directories...

WORK System E-Commerce 3.0.1 - Remote File Inclusion

WORK System E-Commerce 3.0.1 - Remote File Inclusion ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability...

WORK System E-Commerce 3.0.1 - Remote File Inclusion

============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================ Product............: WORK system e-commerce...

CVE-2006-5777

Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged functions via a non-empty finame parameter to 1 addnewcont.php, 2 adminpassw.php, 3 amministrazione.php, 4 artins.php, 5 bgcolor.php, 6 cancartcat.php, 7 canccat.php, 8 cancelart.php...

CVE-2006-5777

CVE-2006-5777 affects Creasito E-Commerce Content Manager 1.3.08. The vulnerability allows remote attackers to bypass authentication and perform privileged functions by supplying a non-empty finame parameter to a long list of admin scripts (e.g., addnewcont.php, adminpassw.php, amministrazione.ph...

Creasito E-Commerce Content Manager (admin) Authentication Bypass

No description provided by source. ============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================...

Creasito E-Commerce Content Manager - admin Authentication Bypass

Creasito E-Commerce Content Manager - admin Authentication Bypass ============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass...

Creasito E-Commerce Content Manager (admin) Authentication Bypass

Exploit for unknown platform in category web applications 0day.today 2018-04-10...

Creasito E-Commerce Content Manager - 'admin' Authentication Bypass

============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================ Product............: Creasito E-Commerce Conten...

Re: Multiple XSS Vulnerabilities in Zen Cart 1.3.5

Full Disclosure Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0003 Status: Full Date: 2006/9/27 Summary: Armorize-ADV-2006-0003 discloses multiple cross-site scripting vulnerabilities that are found in Zen Cart, which is a PHP e-commerce shopping program and is Built on a...

CVE-2006-4969

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

CVE-2006-4970

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4970

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4969

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

CVE-2006-4969

CVE-2006-4969 refers to multiple PHP remote file inclusion vulnerabilities in the WAHM E-Commerce Pie Cart Pro. The issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the Inc_Dir parameter across numerous PHP files (e.g., affiliates.php, orders.php, events.php, i...

CVE-2006-4970

The CVE-2006-4970 issue is a PHP remote file inclusion vulnerability in enc/content.php of WAHM E-Commerce Pie Cart Pro. An attacker can cause remote code execution by supplying a crafted URL in the Home_Path parameter. The vulnerability affects WAHM E‑Commerce Pie Cart Pro products as described,...