Infinities eCommerce SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com d3hydr8 - rsauron - baltazar - low1z - houbysoft - beenu and all darkc0de members Author: p47r1ck Home : www.darkc0de.com Email :...

virtuemart 1.1.2 - Multiple Vulnerabilities

Author: Janek Vind "waraxe" Date: 24. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-71.html Description of vulnerable software: VirtueMart is an Open Source E-Commerce solution to be used together with a Content Management System CMS called Joomla! and Mambo. Joomla! an...

Design/Logic Flaw

Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...

CVE-2009-0962

Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...

CVE-2009-0962

CVE-2009-0962 affects Futomi's CGI Cafe MP Form Mail CGI eCommerce (Ver 1.3.0 and earlier) and CGI Professional (Ver 3.2.2 and earlier). A remote attacker can gain administrative privileges (impersonate an administrator) through unspecified attack vectors. Remediation is to update to the vendor’s...

JVN#84899898 MP Form Mail CGI vulnerability allows third party to gain administrative privileges

MP Form Mail CGI from futomi's CGI Cafe is a software for sending contents entered into an HTML form via email. MP Form Mail CGI contains a vulnerability that allows an attacker to gain administrative privileges. Impact A remote attacker could impersonate an administrator of MP Form Mail CGI...

CVE-2009-0381

SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart comprod 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php...

Sql injection

SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart comprod 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php...

CVE-2009-0381

BazaarBuilder Ecommerce Shopping Cart (com_prod) 5.0 for Joomla! is affected by an SQL injection in the cid parameter of a products action to index.php, allowing remote attackers to execute arbitrary SQL commands. The vulnerability stems from improper handling of user-supplied input in the affect...

CVE-2009-0381

SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart comprod 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php...

Joomla Com BazaarBuilder Shopping Cart v.5.0 SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== Joomla Com BazaarBuilder Shopping Cart v.5.0 SQL Injection Exploit ================================================================== !/usr/bin/perl -w Joomla component:...

[BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below

BLUE MOON SECURITY ADVISORY 2009-01 =================================== :Title: Authentication bypass in Interspire Shopping Cart :Severity: Critical :Reporter: Truong Van Tri and Blue Moon Consulting :Products: Interspire Shopping Cart v4.0.1 Ultimate edition :Fixed in: v4.0.2 Description...

SunByte e-Flower (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== SunByte e-Flower id Remote SQL Injection Vulnerability ======================================================== =========================================================== SunByte...

SunByte e-Flower - id SQL Injection

SunByte e-Flower - id SQL Injection =========================================================== SunByte e-Flower SQL Injection Attack by W4RL0CK =========================================================== VENDOR: Sunbyte URL: http://www.sunbyte.net/ APP: Sunbyte e-Flower eCommerce webapp APP SITE...

SunByte e-Flower - 'id' SQL Injection

=========================================================== SunByte e-Flower SQL Injection Attack by W4RL0CK =========================================================== VENDOR: Sunbyte URL: http://www.sunbyte.net/ APP: Sunbyte e-Flower eCommerce webapp APP SITE:...

sunbyte-sql.txt

=========================================================== SunByte e-Flower SQL Injection Attack by W4RL0CK =========================================================== VENDOR: Sunbyte URL: http://www.sunbyte.net/ APP: Sunbyte e-Flower eCommerce webapp APP SITE:...

SunByte e-Flower (id) Remote SQL Injection Vulnerability

No description provided by source. =========================================================== SunByte e-Flower SQL Injection Attack by W4RL0CK =========================================================== VENDOR: Sunbyte URL: http://www.sunbyte.net/ APP: Sunbyte e-Flower eCommerce webapp APP SITE:...

Webscene eCommerce (level) Remote Sql Injection

Webscene eCommerce level Remote Sql Injection vendor : http://www.webscenesolutions.com/ecommerce-shopping-websites-edinburgh.htm Bug Found By :Angela Chang 14-10-2008 contact: angelatch4ng.cc Greetz: nyubi & Vrs-Chk vuln file : productlist.php Input passed to the "level" is not properly verified...

Webscene eCommerce - productlist.php SQL Injection

Webscene eCommerce - productlist.php SQL Injection source: https://www.securityfocus.com/bid/31755/info Webscene eCommerce is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...

Webscene eCommerce - 'productlist.php' SQL Injection

source: https://www.securityfocus.com/bid/31755/info Webscene eCommerce is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...