EUVD-2005-0899

Malware in sbrugna...

EUVD-2005-0898

Malware in sbrugna...

MagicScripts E-Store Kit-2 PayPal Edition Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12909/info MagicScripts E-Store Kit-2 PayPal Edition is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. Thi...

CVE-2008-3594

Summary: CVE-2008-3594 is a SQL injection vulnerability in the PHP file viewdetails.php across MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal Edition, and E-Store Kit-2 PayPal Edition. The flaw allows remote attackers to terminate or alter SQL queries via the pid parameter, p...

estorekit-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability E-Store Kit-1 viewdetails.php pid E-Store Kit-2 viewdetails.php pid E-Store Kit-1 Pro PayPal Edition viewdetails.php pid E-Store Kit-2 PayPal Edition viewdetails.php pid www.magicscripts.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM &...

E-Store Kit-1 2 PayPal Edition - pid SQL Injection

E-Store Kit-1 2 PayPal Edition - pid SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability E-Store Kit-1 viewdetails.php pid E-Store Kit-2 viewdetails.php pid E-Store Kit-1 Pro PayPal Edition viewdetails.php pid E-Store Kit-2 PayPal Edition viewdetails.php pid www.magicscripts.co...

CVE-2005-0897

PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code...

CVE-2005-0898

CVE-2005-0898 describes a cross-site scripting (XSS) vulnerability in the PHP file downloadform.php of the E-Store Kit-2 PayPal Edition. The flaw allows remote attackers to inject arbitrary web script or HTML by supplying a crafted txn_id parameter, potentially impacting users who view the affect...

CVE-2005-0897

CVE-2005-0897 describes a PHP remote file inclusion vulnerability in the catalog.php file of the E-Store Kit-2 PayPal Edition. The issue arises from allowing the menu and main parameters to reference a URL on a remote server, enabling an attacker to cause the application to include and execute ar...

CVE-2005-0897

PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code...

CVE-2005-0898

Cross-site scripting XSS vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txnid parameter...

File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition

Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition Date: March 26, 2005 Summary: There are file include and xss vulnerabilities in E-Store Kit-2 PayPal Edition...

CVE-2005-0898

Cross-site scripting XSS vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txnid parameter...

MagicScripts E-Store Kit-2 PayPal Edition - Remote File Inclusion

MagicScripts E-Store Kit-2 PayPal Edition - Remote File Inclusion source: https://www.securityfocus.com/bid/12910/info MagicScripts E-Store Kit-2 PayPal Edition is prone to a remote file include vulnerability. Remote attackers could potentially exploit this issue to include a remote malicious PHP...

MagicScripts E-Store Kit-2 PayPal Edition - Cross-Site Scripting

MagicScripts E-Store Kit-2 PayPal Edition - Cross-Site Scripting source: https://www.securityfocus.com/bid/12909/info MagicScripts E-Store Kit-2 PayPal Edition is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code executed in the brows...

dcrab-estore.txt

This is a multi-part message in MIME format. ------=NextPart000000501C531B2.E030A030 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab...