CartStore eCommerce v2.2.x - Multiple XSS Vulnerabilities

Document Title: =============== CartStore eCommerce v2.2.x - Multiple XSS Vulnerabilities Release Date: ============= 2011-06-27 Vulnerability Laboratory ID VL-ID: ==================================== 133 Product & Service Introduction: =============================== CartStore is a sophisticated...

CartStore eCommerce v2.2.x - Multiple XSS Vulnerabilities

Document Title: =============== CartStore eCommerce v2.2.x - Multiple XSS Vulnerabilities Release Date: ============= 2011-06-27 Vulnerability Laboratory ID VL-ID: ==================================== 133 Product & Service Introduction: =============================== CartStore is a sophisticated...

Catalog Builder - Ecommerce Software - Blind SQL Injection

Exploit for php platform in category web applications +------------------------------------------------------------------------------------------+ |------- Catalog Builder - Ecommerce Software - Blind SQL Injection Vulnerability -------|...

Catalog Builder Ecommerce Software Blind SQL Injection

+------------------------------------------------------------------------------------------+ |------- Catalog Builder - Ecommerce Software - Blind SQL Injection Vulnerability -------| +------------------------------------------------------------------------------------------+ + Google Dork hint:...

Catalog Builder eCommerce Software - Blind SQL Injection

Catalog Builder eCommerce Software - Blind SQL Injection +------------------------------------------------------------------------------------------+ |------- Catalog Builder - Ecommerce Software - Blind SQL Injection Vulnerability -------|...

Catalog Builder eCommerce Software - Blind SQL Injection

+------------------------------------------------------------------------------------------+ |------- Catalog Builder - Ecommerce Software - Blind SQL Injection Vulnerability -------| +------------------------------------------------------------------------------------------+ + Google Dork hint:...

CubeCart 2.0.7 Cross Site Scripting / SQL Injection

Exploit Title: CubeCart 2.0.7 XSS && Remote SQL Injection = Multiple Vulnerabilities Date: June, 14th 2011 GMT +7 Author: Shamus Software Link: http://www.cubecart.com/ Version : CubeCart 2.0.7 Tested on: windows 7, ubuntu 11.04 CVE : -...

cubecart 2.0.7 - Multiple Vulnerabilities

Exploit Title: CubeCart 2.0.7 XSS && Remote SQL Injection = Multiple Vulnerabilities Date: June, 14th 2011 GMT +7 Author: Shamus Software Link: http://www.cubecart.com/ Version : CubeCart 2.0.7 Tested on: windows 7, ubuntu 11.04 CVE : -...

HB eCommerce - SQL Injection

HB eCommerce - SQL Injection ------------- HB ECOMMERCE SQL Injection Vulnerability --------------- ------------------------------------------------------------------------ ------------------------------------------------------------------------ + Exploit Title: HB ECOMMERCE SQL Injection...

HB Ecommerce SQL Injection Vulnerability

Exploit for php platform in category web applications ------------- HB ECOMMERCE SQL Injection Vulnerability --------------- ------------------------------------------------------------------------ ------------------------------------------------------------------------ + Exploit Title: HB...

HB eCommerce - SQL Injection

------------- HB ECOMMERCE SQL Injection Vulnerability --------------- ------------------------------------------------------------------------ ------------------------------------------------------------------------ + Exploit Title: HB ECOMMERCE SQL Injection Vulnerability + Google Dork:...

HB Ecommerce SQL Injection

------------- HB ECOMMERCE SQL Injection Vulnerability --------------- ------------------------------------------------------------------------ ------------------------------------------------------------------------ + Exploit Title: HB ECOMMERCE SQL Injection Vulnerability + Google Dork:...

Cetera eCommerce 15.0 SQL Injection / Disclosure

Hello list! I want to warn you about SQL Injection, Full path disclosure, Abuse of Functionality and Insufficient Anti-automation vulnerabilities in Cetera eCommerce. It's engine for online shops. ------------------------- Affected products: ------------------------- Vulnerable are Cetera eCommer...

EZ-Shop 1.02 Lateral SQL Injection Vulnerability

Exploit for php platform in category web applications Security Advisory Details: 14/04/2011 Script EZ-Shop 1.02 Location http://www.fcsoftware.co.uk/index.php?page=opensource Vulnerability SQL Injection Original Adv http://y-osirys.com/security/exploits/id28 Author Giovanni Buzzin, "Osirys" Site...

EZ-Shop 1.02 SQL Injection

Security Advisory Details: 14/04/2011 Script EZ-Shop 1.02 Location http://www.fcsoftware.co.uk/index.php?page=opensource Vulnerability SQL Injection Original Adv http://y-osirys.com/security/exploits/id28 Author Giovanni Buzzin, "Osirys" Site y-osirys.com Contact osirysatautisticidotorg Greets to...

Joomla! Component com_virtuemart 1.1.7 - Blind SQL Injection

Joomla! Component comvirtuemart 1.1.7 - Blind SQL Injection !/usr/bin/python Joomla! comvirtuemart 46 million results Patch: http://dev.virtuemart.net/attachments/202/Patch-VirtueMart-1.1.7a.zip References: - http://www.stratsec.net/Research/Advisories/VirtueMart-SQL-Injection-SS-2011-003 -...

osCSS2 2.1.0 RC12 Local File Inclusion

=================================================================== osCSS2 2.1.0 RC12 Multiple Local File Inclusion Vulnerabilities =================================================================== Software: osCSS2 2.1.0 RC12 Vendor: http://www.oscss.org/ Vuln Type: Local File Inclusion Downloa...

XSS, SQL Injection и SQL DB Structure Extraction уязвимости в Cetera eCommerce

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting, SQL Injection и SQL DB Structure Extraction уязвимостях в Cetera eCommerce. XSS WASC-08 также работают в версии 15.0: http://site/catalog/3Cscript3Ealertdocument.cookie3C/script3E/...

Cetera eCommerce - Multiple Cross-Site Scripting SQL Injections

Cetera eCommerce - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/47044/info Cetera eCommerce is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

Cetera eCommerce - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/47044/info Cetera eCommerce is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...