3376 matches found
CVE-2007-1423
The CVE-2007-1423 entry concerns multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier. The root cause is that the g_include parameter used by include/include_top.php (and certain other PHP scripts) can be manipulated to cause local/remote file inclusion, ...
CVE-2007-1423: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to include/includetop.php and certain other PHP scripts...
WORK system e-commerce <= 3.0.5 Remote File Inclusion Vulnerability
No description provided by source. Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...
WORK system e-commerce <= 3.0.5 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== WORK system e-commerce = 3.0.5 Remote File Inclusion Vulnerability =================================================================== Rodrigo Duarte WORK system e-commerc...
work system E-Commerce 3.0.5 - Remote File Inclusion
work system E-Commerce 3.0.5 - Remote File Inclusion Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...
work system E-Commerce 3.0.5 - Remote File Inclusion
Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo, link,partner,forum,new,FAQ,event,calendar,invoice,mailing,supplier,RSS,...
shopstorenow-sql.txt
============================= HItamputih Crew ==================== hitamputih Advisory Discovered By : IbnuSina ----------------------------------------------------------- Software: shopstorenow E-commerce Shopping Cart Method: SQL Injection...
Sql injection
SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
CVE-2007-0142
SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
CVE-2007-0142
SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
CVE-2007-0142
CVE-2007-0142 describes a SQL injection in orange.asp of ShopStoreNow E-commerce Shopping Cart, exploitable via the CatID parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry lists base metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P, base score 7.5 (HIGH). Th...
CVE-2007-0142: Undefined Security Weakness
SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
Shopstorenow E-commerce Shopping Cart Orange.ASP SQL注入漏洞
Shopstorenow E-commerce Shopping Cart 是一款基于ASP的WEB应用程序。 Shopstorenow E-commerce Shopping Cart 不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Orange.ASP'脚本对用户提交的'CatID'参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 Shopstorenow E-commerce Shopping Cart 目前没有解决方案提供： http://www.shopstorenow.com...
shopstorenow (orange.asp) sql injection
============================= HItamputih Crew ==================== hitamputih Advisory Discovered By : IbnuSina ----------------------------------------------------------- Software: shopstorenow E-commerce Shopping Cart Method: SQL Injection...
Shopstorenow E-Commerce Shopping Cart - Orange.asp SQL Injection
Shopstorenow E-Commerce Shopping Cart - Orange.asp SQL Injection source: https://www.securityfocus.com/bid/21905/info Shopstorenow E-commerce Shopping Cart is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL...
Shopstorenow E-Commerce Shopping Cart - 'Orange.asp' SQL Injection
source: https://www.securityfocus.com/bid/21905/info Shopstorenow E-commerce Shopping Cart is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise...
Valdersoft Shopping Cart 3.0 Multiple Remote File Include Vulnerabilities
No description provided by source. Valdersoft Shopping Cart v3.0 E-Commerce Software commonIncludePath Remote File Include +class : Remote File Include Vulnerability +Author : mdx +Files : +/commoninclude/common.php , /include/common.php, /admin/include/common.php +code : + + include...
sitecatalyst-xss.txt
Hackers Center Security Group http://www.hackerscenter.com/ Doz's Security Advisory Desc: SiteCatalyst Web Login Cross Site Vulrnabilities Risk: Medium Omniture, Inc aims its aperture at your Web site. The company provides Internet analytic software and services to corporate customers such as AOL...
PgmReloaded <= 0.8.5 Multiple Remote File Include Vulnerabilities
+------------------------------------------------------------------------------------------- + PgmReloaded = 0.8.5 Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- + Vendor ............:...
Valdersoft Shopping Cart v3.0 (E-Commerce Software)*****[ commonIncludePath ] Remote File Include
Valdersoft Shopping Cart v3.0 E-Commerce Software commonIncludePath Remote File Include +class : Remote File Include Vulnerability +Author : mdx +Files : +/commoninclude/common.php , /include/common.php, /admin/include/common.php +code : + + include $commonIncludePath."common.php" ; + + Exploit :...