jbShop e107 7 CMS Plugin - SQL Injection

Exploit Title: jbShop - e107 v7 CMS plugin - SQL Injection vulnerability Author: Robert Cooper adminatwebsiteauditing.org Software Link: http://sourceforge.net/projects/jbshop/ Tested on: Linux/Windows 7 Vulnerable Parameter: itemid= PoC:...

jbShop - e107 v7 CMS Plugin - SQL Injection

Exploit for php platform in category web applications Exploit Title: jbShop - e107 v7 CMS plugin - SQL Injection vulnerability Author: Robert Cooper adminatwebsiteauditing.org Software Link: http://sourceforge.net/projects/jbshop/ Tested on: Linux/Windows 7 Vulnerable Parameter: itemid= PoC:...

Core Security Technologies Advisory 2011.0810

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ e107 CMS Script Command Injection 1. Advisory Information Title: e107 CMS Script Command Injection Advisory ID: CORE-2011-0810 Advisory URL:...

e107 CMS Script Command Injection

Core Security - Corelabs Advisory e107 CMS Script Command Injection 1. Advisory Information Title: e107 CMS Script Command Injection Advisory ID: CORE-2011-0810 Advisory URL: http://www.coresecurity.com/content/e107-cms-script-command-injection Date published: 2011-10-24 Date of last update:...

e107 0.7.24 - 'cmd' Remote Command Execution

source: https://www.securityfocus.com/bid/50339/info e107 is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to execute arbitrary commands within the context of the vulnerable application. e107 0.7.24 ...

e107 0.7.24 - cmd Remote Command Execution

e107 0.7.24 - cmd Remote Command Execution source: https://www.securityfocus.com/bid/50339/info e107 is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to execute arbitrary commands within the context ...

e107 Multiple PHP Files Information Disclosure Vulnerability

e107 is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:e107:e107"; ifdescripti...

E107 Persian Directory Traversal & Arbitrary File Download

Exploit for php platform in category web applications +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Author : St493r Contact : email protected Title : E107 Persian Directory Traversal & Arbitrary File Download Vendor : http://e107.com Software :...

CVE-2011-3731

e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by e107plugins/pdf/e107pdf.php and certain other files...

Information disclosure

e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by e107plugins/pdf/e107pdf.php and certain other files...

CVE-2011-3731

e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by e107plugins/pdf/e107pdf.php and certain other files...

CVE-2011-3731

CVE-2011-3731 affects e107 0.7.24. The issue is an information disclosure where remote attackers can obtain the installation path by directly requesting certain PHP files (e.g., e107_plugins/pdf/e107pdf.php). The root cause is improper handling of file requests that reveals path info in error mes...

CVE-2011-3731: Exposure of Sensitive Information to an Unauthorized Actor

e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by e107plugins/pdf/e107pdf.php and certain other files...

PT-2011-4621

Name of the Vulnerable Software and Affected Versions e107 version 0.7.24 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as e107 plugins/pdf/e107pdf.php, which reveals the...

Pranian Group e107 Cross Site Scripting Vulnerabilities

IRANIAN THE BEST HACKERS IN THE WORLD Cross Site Scripting Vulnerabilities Pranian Group e107 AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Persian Gulf 4 Ever! Dork : "by Pranian Group e107" Exploite:...

Pranian Group e107 Cross Site Scripting Vulnerabilities

IRANIAN THE BEST HACKERS IN THE WORLD Cross Site Scripting Vulnerabilities Pranian Group e107 AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Persian Gulf 4 Ever! Dork : "by Pranian Group e107" Exploite:...

Pranian Group e107 Cross Site Scripting

IRANIAN THE BEST HACKERS IN THE WORLD Cross Site Scripting Vulnerabilities Pranian Group e107 AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Persian Gulf 4 Ever! Dork : "by Pranian Group e107" Exploite:...

e107 0.7.25 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23004 Reference: http://www.htbridge.ch/advisory/multiplevulnerabilitiesine1071.html Product: e107 website system Vendor: e107 http://e107.org/ Vulnerable Version: 0.7.25 and probably prior Tested on: 0.7.25 Vendor Notification: 25 May 2011 Vulnerability Type: Multiple...

HTB23004: Multiple Vulnerabilities in e107

Vulnerability ID: HTB23004 Reference: http://www.htbridge.ch/advisory/multiplevulnerabilitiesine1071.html Product: e107 website system Vendor: e107 http://e107.org/ Vulnerable Version: 0.7.25 and probably prior Tested on: 0.7.25 Vendor Notification: 25 May 2011 Vulnerability Type: Multiple...

Cross-site Request Forgery in e107

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in e107 which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in e107 The vulnerability exists due to insufficient verification of the request origin in...