PT-2017-18122

Name of the Vulnerable Software and Affected Versions modified eCommerce Shopsoftware version 2.0.2.2 rev 10690 Description The issue concerns an XXE XML External Entity vulnerability. It is located in the "api/it-recht-kanzlei/api-it-recht-kanzlei.php" API endpoint. Recommendations For version...

Fashmark eCommerce 1.2 SQL Injection

Exploit Title: Fashmark - eCommerce Script v1.2 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.ncrypted.net/ Software: https://www.ncrypted.net/fashmark Demo: http://demo.ncryptedprojects.com/fashmark-ent/ Version: 1.2 Tested on: Win7 x64, Kali Linux x64 Exploit...

Fashmark 1.2 - category Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Fashmark - eCommerce Script v1.2 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.ncrypted.net/ Software: https://www.ncrypted.net/fashmark Demo: http://demo.ncryptedprojects.com/fashmark-ent/...

Fashmark 1.2 - category SQL Injection

Fashmark 1.2 - category SQL Injection Exploit Title: Fashmark - eCommerce Script v1.2 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.ncrypted.net/ Software: https://www.ncrypted.net/fashmark Demo: http://demo.ncryptedprojects.com/fashmark-ent/ Version: 1.2 Tested o...

Fashmark 1.2 - 'category' SQL Injection

Exploit Title: Fashmark - eCommerce Script v1.2 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.ncrypted.net/ Software: https://www.ncrypted.net/fashmark Demo: http://demo.ncryptedprojects.com/fashmark-ent/ Version: 1.2 Tested on: Win7 x64, Kali Linux x64 Exploit...

CVE-2016-3694

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the 1 ordersstatus or 2 customersstatus parameter to api/easybill/easybillcsv.php...

CVE-2016-3694

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the 1 ordersstatus or 2 customersstatus parameter to api/easybill/easybillcsv.php...

CVE-2016-3694

CVE-2016-3694 affects modified eCommerce Shopsoftware 2.0.0.0 revision 9678. The vulnerability is a GET-based SQL injection: the parameters orders_status and customers_status passed to api/easybill/easybillcsv.php are not adequately filtered, enabling remote attackers to execute arbitrary SQL com...

PT-2017-8409

Name of the Vulnerable Software and Affected Versions modified eCommerce Shopsoftware version 2.0.0.0 revision 9678 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the orders status or customers status parameter to the...

CVE-2016-3694: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the 1 ordersstatus or 2 customersstatus parameter to api/easybill/easybillcsv.php...

Itech Multi Vendor Script 6.49 SQL Injection

Exploit Title: Itech Multi Vendor Script 6.49 a SQL Injection Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/multi-vendor-shopping-script/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application...

Itech Multi Vendor Script 6.49 - pl SQL Injection

Itech Multi Vendor Script 6.49 - pl SQL Injection Exploit Title: Itech Multi Vendor Script 6.49 – SQL Injection Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/multi-vendor-shopping-script/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom...

Itech Multi Vendor Script 6.49 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Itech Multi Vendor Script 6.49 – SQL Injection Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/multi-vendor-shopping-script/ Exploit Author: Kaan KAMIS Contact:...

Itech Multi Vendor Script 6.49 - 'pl' SQL Injection

Exploit Title: Itech Multi Vendor Script 6.49 – SQL Injection Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/multi-vendor-shopping-script/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2017-00995)

Oracle E-Business Suite E-Business Suite is a set of Oracle's fully integrated global business management software. Oracle Applications Manager is one of the components used to monitor the performance and availability of the Oracle Application Server. A remote vulnerability exists in the Oracle...

ECommerce TIBSECART - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Vulnerability:Profile Arbitrary Shell Upload Google Dork: ECommerce-TIBSECART Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/tibs-ecart/ Script Name: ECommerce-TIBSECART Script Buy Now: http://www.tibsolutions.com/tibs-ecart/...

ECommerce Multi-Vendor Software - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Vulnerability:Profile Arbitrary Shell Upload Google Dork: ECommerce-TIBSECART Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/tibs-ecart/ Script Name: ECommerce-TIBSECART Script Buy Now: http://www.tibsolutions.com/tibs-ecart/...

ECommerce-Multi-Vendor Software - Arbitrary File Upload

ECommerce-Multi-Vendor Software - Arbitrary File Upload Vulnerability:Profile Arbitrary Shell Upload Google Dork: ECommerce-Multi-Vendor Software Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/multi-vendor/ Script Name: ECommerce-Multi-Vendor Software Script Buy Now:...

ECommerce-TIBSECART - Arbitrary File Upload

ECommerce-TIBSECART - Arbitrary File Upload Vulnerability:Profile Arbitrary Shell Upload Google Dork: ECommerce-TIBSECART Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/tibs-ecart/ Script Name: ECommerce-TIBSECART Script Buy Now: http://www.tibsolutions.com/tibs-ecart/ Author: İhsan...

ECommerce-Multi-Vendor Software - Arbitrary File Upload

Vulnerability:Profile Arbitrary Shell Upload Google Dork: ECommerce-Multi-Vendor Software Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/multi-vendor/ Script Name: ECommerce-Multi-Vendor Software Script Buy Now: http://www.tibsolutions.com/multi-vendor/ Author: İhsan Şencan Author...