CVE-2005-4287

CVE-2005-4287 affects MarmaraWeb E-commerce. The vulnerability is a PHP remote file include in index.php via the page parameter, enabling remote code execution. The issue stems from insufficient validation of the included file path, leading to arbitrary code execution with the web server. Connect...

CVE-2005-4288

CVE-2005-4288 refers to a Cross-site scripting (XSS) vulnerability in MarmaraWeb E-commerce, exploitable via the page parameter to index.php. The affected component is MarmaraWeb E-commerce (index.php), with the root cause described as improper handling of the page parameter that allows injection...

MarmaraWeb E-commerce Script Cross Site Scripting

MarmaraWeb E-commerce Script Cross Site Scripting Hi all B3g0kathackermail.com Kurdish Hacker Special Thanx All Kurdish Hackers Freedom For Ocalan!!! ----------------------------------- MarmaraWeb E-commerce Script Cross Site Scripting ----------------------------------- Site:...

StaticStore Search Engine Friendly E-Commerce XSS

StaticStore Search Engine Friendly E-Commerce XSS Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/staticstore-search-engine-friendly-e.html vendor:www.staticstore.com affected version:1.189A and prior Product Description: StaticStore is a full sto...

MarmaraWeb E-commerce Remote Command Exucetion

MarmaraWeb E-commerce Remote Command Exucetion Hi all B3g0kathackermail.com Kurdish Hacker Special Thanx All Kurdish Hackers Freedom For Ocalan!!! ----------------------------------- MarmaraWeb E-commerce Remote Command Exucetion ----------------------------------- Site:...

CVE-2005-4288: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitrary web script or HTML via the page parameter to index.php. NOTE: this might be resultant from CVE-2005-4287...

CVE-2005-4287: Undefined Security Weakness

PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to index.php...

MarmaraWeb E-Commerce - index.php?page Cross-Site Scripting

MarmaraWeb E-Commerce - index.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/15875/info E-commerce is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

MarmaraWeb E-Commerce - 'index.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15875/info E-commerce is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

MarmaraWeb E-Commerce - Remote File Inclusion

source: https://www.securityfocus.com/bid/15877/info E-commerce is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious...

MarmaraWeb E-Commerce - Remote File Inclusion

MarmaraWeb E-Commerce - Remote File Inclusion source: https://www.securityfocus.com/bid/15877/info E-commerce is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include ...

CVE-2005-4081

Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in 1 the user login and 2 administrator login pages...

CVE-2005-4081

Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in 1 the user login and 2 administrator login pages...

CVE-2005-4081

CVE-2005-4081 involves multiple SQL injection vulnerabilities in Alisveristr E-commerce. The issues affect login functionality (user and administrator login pages) and allow remote attackers to bypass authentication and potentially execute arbitrary SQL commands through the username and password ...

CVE-2005-4081: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in 1 the user login and 2 administrator login pages...

alisveristrSQL.txt

Hi all B3g0kathackermail.com Kurdish Hacker Special Thanx All Kurdish Hackers Freedom For Ocalan!!! ----------------------------------- Alisveristr E-commerce User Login Sql İnjection Alisveristr E-commerce Admin Login Sql İnjection ----------------------------------- Site:...

Zen-Cart <= 1.2.6d blind SQL injection / remote commands execution:

Zen-Cart = 1.2.6d blind SQL injection / remote commands execution: software: site: http://www.zencart.com/ description:"Zen Cart™ truly is the art of e-commerce; a free, user-friendly, open source shopping cart system. The software is being developed by group of like-minded shop owners,...

Alisveristr E-Commerce Admin Login SQL İnjection

Hi all B3g0kathackermail.com Kurdish Hacker Special Thanx All Kurdish Hackers Freedom For Ocalan!!! ----------------------------------- Alisveristr E-commerce User Login Sql njection Alisveristr E-commerce Admin Login Sql njection ----------------------------------- Site: http://www.alisveristr.c...

Alisveristr E-Commerce Login - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15699/info Alisveristr E-commerce is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

Alisveristr E-Commerce Login - Multiple SQL Injections

Alisveristr E-Commerce Login - Multiple SQL Injections source: https://www.securityfocus.com/bid/15699/info Alisveristr E-commerce is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in a...