WordPress WP e-Commerce Plugin 3.8.6 - Cross Site Scripting

WordPress WP e-Commerce plugin's "cartmessages" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...

Joomla VirtualMoney SQL Injection

Joomla Component virtualmoney SQL Injection Vulnerability Author : Fl0riX Bug Researchers Name : Joomla comvirtualmoney info : http://extensions.joomla.org/extensions/e-commerce/paid-membership-a-subscriptions/17714 Bug Type : SQL injection Infection : Admin Login Bilgileri Alinabilir. Example : ...

WordPress e-Commerce 3.8.4 SQL Injection

Original Advisory: http://www.ihteam.net/advisory/wordpress-wp-e-commerce-plugin/ Plain text here: http://www.ihteam.net/advisories/561684984189wp-e-commerce384sqli.tar.gz $value $formsql = "SELECT FROM " . WPSCTABLECHECKOUTFORMS . " WHERE id = '$valueid' LIMIT 1?; $formdata = $wpdb-getrow...

N.E.T. E-Commerce Group Cross Site Scripting

Exploit Title: XSS vulnerabilitiy in N.E.T E-Commerce group Date: 12-07-2011 Author: nImaarek Google Dork: intext:"Designed And developed By N.E.T E-Commerce group" Home : Pentesters.ir | sepehr-team.org Exploit alertString.fromCharCode88, 83, 83 http:///search.php?AdsID=&adstype=&kind=2&key=xss...

Cross-site Scripting (XSS) Vulnerability in WP e-Commerce

High-Tech Bridge SA Security Research Lab has discovered vulnerability in WP e-Commerce, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WP e-Commerce Input passed via the cartmessages parameter to...

eClime eCommerce JE 1.0.6b - SQL Injection Vulnerabilities

Document Title: =============== eClime eCommerce JE 1.0.6b - SQL Injection Vulnerabilities Release Date: ============= 2011-07-13 Vulnerability Laboratory ID VL-ID: ==================================== 82 Product & Service Introduction: =============================== eclime is a very powerful...

Tradingeye E-Commerce Shopping Cart - Multiple Vulnerabilities

Tradingeye E-Commerce Shopping Cart - Multiple Vulnerabilities Exploit Title: Tradingeye Multiple Vulnerabilities Vendor: www.tradingeye.com Date: 12th july,2011 Author: $4d0//r007k17 a.k.a Raghavendra Karthik D http://www.shadowrootkit.wordpress.com Google Dork: Powered by Tradingeye. 2009...

Tradingeye E-Commerce Shopping Cart - Multiple Vulnerabilities

Exploit Title: Tradingeye Multiple Vulnerabilities Vendor: www.tradingeye.com Date: 12th july,2011 Author: $4d0//r007k17 a.k.a Raghavendra Karthik D http://www.shadowrootkit.wordpress.com Google Dork: Powered by Tradingeye. 2009 Tradingeye v6 demo BREIF DESCRIPTION Tradingeye is a fully-featured...

Tradingeye E-commerce Shopping Cart Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Tradingeye Multiple Vulnerabilities Vendor: www.tradingeye.com Date: 12th july,2011 Author: $4d0//r007k17 a.k.a Raghavendra Karthik D http://www.shadowrootkit.wordpress.com Google Dork: Powered by Tradingeye. 2009 Tradingeye v6...

New iOS Jail Break Stokes Fears of Drive By Attacks

The clock is ticking for Apple to issue a patch for the iOS operating system that powers iPhones, iPods and iPads following the release of a remote exploit that uses specially crafted PDF files to defeat iOS’s content protection mechanisms and “jailbreak” mobile devices like the iPhone and iPad...

Dangerous Whitespaces

By Marta Janus A few days ago, I blogged about a PHP/JS malware targeting the osCommerce platform, which used an interesting new technique to obfuscate the malicious code. It so happens, that today I came across even more advanced sample of a PHP infector, also in the context of a vulnerable...

PEEL Open e-commerce systems Sensitive Database Disclosure Vulnerability

Exploit for php platform in category web applications +Exploit Title: PEEL Open e-commerce systems Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + dork : inurl:"lire/index.php?rubid=" + Category : Web Apps SQli...

frame-oshop SQL injection vulnerability and fix-vulnerability warning-the black bar safety net

frame-oshop is a e-Commerce system, the frame-oshop in the presence ofSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: frame-oshop SQL Injection Vulnerability product: frame-oshop vendor: http://www.sdaxx.de/ date: 15.05.2011 status: 0day version: i dunno...

Leading Edge Technology Solutions (L.E.T.S) SQL-i Vulnerability

Exploit for php platform in category web applications +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+= +=+=+= /\ | | | | +=+=+= +=+=+= / \ | || | / / | \ | |\ \ / \ / / +=+=+= +=+=+= / /\ | || | // | | | | / | | \ / / / +=+=+= +=+=+= / \ | | | | | | ...

Leading Edge Technology Solutions SQL Injection

========================================================================= Leading Edge Technology Solutions L.E.T.S SQL-i Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+=...

EZ-Shop 1.02 - Lateral SQL Injection

EZ-Shop 1.02 - Lateral SQL Injection Security Advisory Details: 14/04/2011 Script EZ-Shop 1.02 Location http://www.fcsoftware.co.uk/index.php?page=opensource Vulnerability SQL Injection Original Adv http://y-osirys.com/security/exploits/id28 Author Giovanni Buzzin, "Osirys" Site y-osirys.com...

EZ-Shop 1.02 - Lateral SQL Injection

Security Advisory Details: 14/04/2011 Script EZ-Shop 1.02 Location http://www.fcsoftware.co.uk/index.php?page=opensource Vulnerability SQL Injection Original Adv http://y-osirys.com/security/exploits/id28 Author Giovanni Buzzin, "Osirys" Site y-osirys.com Contact osirysatautisticidotorg Greets to...

QNet confirmed that e-commerce portal was down due to DDoS attack

QNet confirmed that E-commerce portal was down due to DDoS attack QNet has confirmed that its e-commerce portal was recently the target of a Distributed Denial of Service DDoS attack. This caused its main website to be offline for over 36 hours. QI Group IT Director, TG Kintanar said, "As a globa...

PrestaShop Open-Source E-commerce SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PrestaShop Open-Source E-commerce SQL Injection Vulnerability Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Script: http://www.prestashopcom Dork: allinurl:...

Online Store PHP Script By Goran SQL Injection

f0und by: kurdish hackers team group: kurd-team c0ntact: [email protected] site: www.kurdteam.org ================================= ==============script=============== ================================= script: Online Store d0rk:Copyrights © 2009 - Online Store. All rights reserved. Powered by:...