LiteCart 1.1.2.1 Cross Site Scripting

Information ----------- Advisory by Netsparker. Name: Multiple XSS Vulnerabilities in LiteCart Affected Software : LiteCart Affected Versions: 1.1.2.1 and possibly below Vendor Homepage : http://www.litecart.net Vulnerability Type : Cross-site Scripting Severity : Important CVE-ID: CVE-2014-7183...

PayPal Inc iOS Mobile 4.6.0 Input Validation

Document Title: =============== PayPal Inc 86 iOS 4.6 - Validation & Design Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=915 PayPal Security UID: eff8aq Release Date: ============= 2014-09-30 Vulnerability Laboratory ID VL-ID:...

Paypal MOS API - Bypass & Persistent XML Vulnerability

Document Title: =============== Paypal MOS API - Bypass & Persistent XML Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1129 PayPal Security UID: TM13a2uL Release Date: ============= 2014-10-14 Vulnerability Laboratory ID VL-ID:...

Paypal MOS API - Bypass & Persistent XML Vulnerability

Document Title: =============== Paypal MOS API - Bypass & Persistent XML Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1129 PayPal Security UID: TM13a2uL Release Date: ============= 2014-10-14 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #98 MOS - Persistent Settings Vulnerability

Document Title: =============== PayPal Inc BB 98 MOS - Persistent Settings Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=983 Release Date: ============= 2014-10-13 Vulnerability Laboratory ID VL-ID: ==================================== 98...

e-Commerce Vision Design Group Code injection Vulnerability

Exploit for php platform in category web applications Exploit Title: e-Commerce Vision Design Group Code injection Date: 10/09/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : email protected | FB.Com/Pakistani1337 Greetz : KhantastiC - b0x - 1337 - H4x0rl1f3 - Shadow008 - Invectus...

PayPal Inc BB #96 - Persistent Tags Vulnerability

Document Title: =============== PayPal Inc BB 96 - Persistent Tags Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=954 PayPal Security UID: apf87gW Release Date: ============= 2014-10-08 Vulnerability Laboratory ID VL-ID:...

PayPal Service Manager Script Insertion

Document Title: =============== PayPal Inc Bug Bounty 71 PPM - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=870 PayPal Security UID: Roc83bl Release Date: ============= 2014-09-24 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #53 - Multiple Persistent Vulnerabilities

Document Title: =============== PayPal Inc BB 53 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=835 Release Date: ============= 2014-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 835...

PayPal Inc #86 iOS 4.6 - Validation & Design Vulnerability

Document Title: =============== PayPal Inc 86 iOS 4.6 - Validation & Design Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=915 PayPal Security UID: eff8aq Release Date: ============= 2014-09-29 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #53 - Multiple Persistent Vulnerabilities

Document Title: =============== PayPal Inc BB 53 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=835 Release Date: ============= 2014-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 835...

Paypal Inc BB #30 - Bypass & Persistent Vulnerabilities

Document Title: =============== Paypal Inc BB 30 - Bypass & Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=705 Release Date: ============= 2014-09-26 Vulnerability Laboratory ID VL-ID: ==================================== 705...

PayPal Inc BB #70 FR - Persistent Mail Vulnerability

Document Title: =============== PayPal Inc BB 70 FR - Persistent Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=869 PayPal Security UID: Roc83bl Release Date: ============= 2014-09-25 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #70 FR - Persistent Mail Vulnerability

Document Title: =============== PayPal Inc BB 70 FR - Persistent Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=869 PayPal Security UID: Roc83bl Release Date: ============= 2014-09-25 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #71 PPM - Persistent Filter Vulnerability

Document Title: =============== PayPal Inc BB 71 PPM - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=870 PayPal Security UID: Roc83bl Release Date: ============= 2014-09-24 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #59 - Persistent Mail Encoding Vulnerability

Document Title: =============== PayPal Inc BB 59 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=844 PayPal Security UID: CabdfGa Release Date: ============= 2014-09-23 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #59 - Persistent Mail Encoding Vulnerability

Document Title: =============== PayPal Inc BB 59 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=844 PayPal Security UID: CabdfGa Release Date: ============= 2014-09-23 Vulnerability Laboratory ID VL-ID:...

SA-CONTRIB-2014-085 - Ubercart - Information disclosure

The Ubercart module for Drupal provides a shopping cart and e-commerce features for Drupal. The per-user order history view is not properly protected. This vulnerability is mitigated by the fact that an attacker must have an account with the "view own orders" permission and can only view order ID...

Mulitple WordPress Themes (admin-ajax.php, img param) - Arbitrary File Download

No description provided by source. WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage: http://themeforest.net/item/cuckootap-one-page-parallax-wp-theme-plus-eshop/3512405...

CS-Cart 4.2.0 Session Hijacking Vulnerability

CS-Cart version 4.2.0 suffers from a session hijacking vulnerability due to weakly minted session identifiers. Vendor: CS-Cart Homepage: https://www.cs-cart.com Fixed in: v4.2.1 Released: July 22nd 2014 CS-Cart is 127MB of shitty PHP and HTML code that is supposed to function as a secure e-commer...