Ecmall SQL注入二

简要描述： 这个洞我事先搜索了下乌云和各大论坛，没有查到结果，但是不排除数字X平台或者其他渠道厂商已经获知漏洞详情，知道有漏洞而不修补，我还得接着提。 详细说明： 缺陷文件：/app/sellergroupbuy.app.php function edit $id = empty$GET'id' ? 0 : $GET'id'; //未过滤 if !$id $this-showwarning'nosuchgroupbuy'; return false; if !$this-ican$id, ACT //进入ican函数 $this-showwarning'Hacking Attempt';...

Zen Cart E-Commerce 1.5.1 XSS / Open Redirect / Shell Upload

============================================================== Title ...| Multiple vulnerabilities in Zen Cart e-commerce Version .| zen-cart-v1.5.1-full-fileset-09182012 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| ============================================================== + For...

Phony SSL Certs Spoof Google, Facebook, GoDaddy, others

Dozens of phony SSL certificates were discovered this week mocking legitimate certs from banks, e-commerce sites, ISPs and social networks. If a user stumbled over one of the bogus certificates on a mobile device it could put them at risk for a man-in-the-middle attack. Disguised as official...

Hackers targeting non-browser applications with Fake SSL Certificates

Having SSL Certification doesn't mean that the website you are visiting is not a bogus website. SSL certificates protect web users in two ways, it encrypts sensitive information such as usernames, passwords, or credit card numbers and also verify the identity of websites. But today hackers and...

WordPress Plugin WP E-Commerce - Multiple Vulnerabilities

WordPress Plugin WP E-Commerce - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/65130/info The WP e-Commerce plugin for WordPress is prone to multiple security vulnerabilities, including: 1. Multiple remote code-execution vulnerabilities. 2. A local file-include vulnerability ...

WordPress E-Commerce 3.8.9.5 File Upload / XSS / CSRF / Code Execution

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

WordPress WP e-Commerce Plugin - Multiple Security Vulnerabilities

WP e-Commerce plugin is prone to multiple security vulnerabilities, such as a local file include, arbitrary file upload and multiple remote code execution vulnerabilities. An attacker can upload arbitrary files to the affected computer that may result in arbitrary code execution within the contex...

WordPress Plugin WP E-Commerce - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/65130/info The WP e-Commerce plugin for WordPress is prone to multiple security vulnerabilities, including: 1. Multiple remote code-execution vulnerabilities. 2. A local file-include vulnerability 3. An arbitrary file-upload vulnerability An attacker can...

PHPSHE电商程序SQL注入漏洞

简要描述： PHPSHE SQL注入3 详细说明： 在添加购物车时，存在过滤。 但是在更新购物车商品数量时，没有过滤，导致SQL注入。 在/module/index/order.php文件： //@ 购物车商品更改数量 @// case 'cartnum': $money'orderproductmoney' = $money'orderwlmoney' = $money'ordermoney' = 0; if pelogin'user' $result = $db-peupdate'cart', array'userid'=$suserid,...

osCmax e-Commerce 2.5.3 Cross Site Scripting / Shell Upload

Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KedAns-Dz member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Title : osCmax...

Paypal Inc BB #14 - Persistent Payment Mail Vulnerability

Document Title: =============== Paypal Inc BB 14 - Persistent Payment Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=651 Release Date: ============= 2013-11-19 Vulnerability Laboratory ID VL-ID: ==================================== 65...

A jingdong log security vulnerabilities-vulnerability warning-the black bar safety net

Table of Contents 1 Introduction 2 the inspection process 3 Summary 1 Introduction Recently looking at an open source site code, found if the login page via the http Protocol requests, will be redirected to use the https Protocol of the url, so you can ensure login security. Today a whim, want to...

PayPal Bug Bounty #65 CN - Redirect Web Vulnerability

Document Title: =============== PayPal Bug Bounty 65 CN - Redirect Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=860 PayPal Security UID: rdbeeur Release Date: ============= 2013-11-16 Vulnerability Laboratory ID VL-ID:...

PayPal Shipping Cross Site Scripting

Document Title: =============== Paypal Inc Bug Bounty 104 - Persistent Exception Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1038 PayPal Security UID: gJ1127yy Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID:...

Paypal Inc BB #104 - Persistent Exception Vulnerability

Document Title: =============== Paypal Inc BB 104 - Persistent Exception Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1038 PayPal Security UID: gJ1127yy Release Date: ============= 2013-10-25 Vulnerability Laboratory ID VL-ID:...

PayPal Mail Encoding Script Insertion

Document Title: =============== PayPal Inc Bug Bounty 61 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=846 PayPal Security UID: bzbe1he Release Date: ============= 2013-10-16 Vulnerability Laboratory ID VL-ID:...

Paypal Inc #105 MOS - Multiple Print Layout Vulnerabilities

Document Title: =============== Paypal Inc 105 MOS - Multiple Print Layout Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1039 PayPal Security UID: xE1128lV Release Date: ============= 2013-10-14 Vulnerability Laboratory ID VL-ID:...

AspxCommerce 2.0 - Arbitrary File Upload

AspxCommerce 2.0 - Arbitrary File Upload Exploit Title: AspxCommerce v2.0 - Arbitrary File Upload Vulnerability Exploit Author: SANTHO Vendor Homepage: http://www.aspxcommerce.com/ Version: Version 2.0 and below Introduction: AspxCommerce is a complete e-Commerce solution for setting up a fully...

Paypal BBP #99 - Filter Bypass & Persistent Vulnerability

Document Title: =============== Paypal BBP 99 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=984 PayPal Security UID: nj1071UU Release Date: ============= 2013-09-18 Vulnerability Laboratory ID VL-ID:...

Prestashop v1.5.5 - CRLF Injection Vulnerability

Prestashop version 1.5.5 suffers from a CRLF injection vulnerability that allows for addition of headers. Exploit Title: Prestashop v1.5.5 - CRLF Injection Vulnerability Official site: http://www.prestashop.com Official Demo : http://demo-store.prestashop.com/ Risk Level: Medium Exploit Author:...