3083 matches found
virtuemart 1.1.2 - Multiple Vulnerabilities
Author: Janek Vind "waraxe" Date: 24. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-71.html Description of vulnerable software: VirtueMart is an Open Source E-Commerce solution to be used together with a Content Management System CMS called Joomla! and Mambo. Joomla! an...
Design/Logic Flaw
Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...
CVE-2009-0962
Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...
CVE-2009-0962: Undefined Security Weakness
Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...
CVE-2009-0962
CVE-2009-0962 affects Futomi's CGI Cafe MP Form Mail CGI eCommerce (Ver 1.3.0 and earlier) and CGI Professional (Ver 3.2.2 and earlier). A remote attacker can gain administrative privileges (impersonate an administrator) through unspecified attack vectors. Remediation is to update to the vendor’s...
JVN#84899898 MP Form Mail CGI vulnerability allows third party to gain administrative privileges
MP Form Mail CGI from futomi's CGI Cafe is a software for sending contents entered into an HTML form via email. MP Form Mail CGI contains a vulnerability that allows an attacker to gain administrative privileges. Impact A remote attacker could impersonate an administrator of MP Form Mail CGI...
CVE-2009-0381
SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart comprod 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php...
Sql injection
SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart comprod 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php...
CVE-2009-0381
BazaarBuilder Ecommerce Shopping Cart (com_prod) 5.0 for Joomla! is affected by an SQL injection in the cid parameter of a products action to index.php, allowing remote attackers to execute arbitrary SQL commands. The vulnerability stems from improper handling of user-supplied input in the affect...
CVE-2009-0381
SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart comprod 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php...
CVE-2009-0381: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart comprod 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php...
Joomla Com BazaarBuilder Shopping Cart v.5.0 SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== Joomla Com BazaarBuilder Shopping Cart v.5.0 SQL Injection Exploit ================================================================== !/usr/bin/perl -w Joomla component:...
[BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below
BLUE MOON SECURITY ADVISORY 2009-01 =================================== :Title: Authentication bypass in Interspire Shopping Cart :Severity: Critical :Reporter: Truong Van Tri and Blue Moon Consulting :Products: Interspire Shopping Cart v4.0.1 Ultimate edition :Fixed in: v4.0.2 Description...
SunByte e-Flower (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================== SunByte e-Flower id Remote SQL Injection Vulnerability ======================================================== =========================================================== SunByte...
sunbyte-sql.txt
=========================================================== SunByte e-Flower SQL Injection Attack by W4RL0CK =========================================================== VENDOR: Sunbyte URL: http://www.sunbyte.net/ APP: Sunbyte e-Flower eCommerce webapp APP SITE:...
SunByte e-Flower (id) Remote SQL Injection Vulnerability
No description provided by source. =========================================================== SunByte e-Flower SQL Injection Attack by W4RL0CK =========================================================== VENDOR: Sunbyte URL: http://www.sunbyte.net/ APP: Sunbyte e-Flower eCommerce webapp APP SITE:...
SunByte e-Flower - id SQL Injection
SunByte e-Flower - id SQL Injection =========================================================== SunByte e-Flower SQL Injection Attack by W4RL0CK =========================================================== VENDOR: Sunbyte URL: http://www.sunbyte.net/ APP: Sunbyte e-Flower eCommerce webapp APP SITE...
SunByte e-Flower - 'id' SQL Injection
=========================================================== SunByte e-Flower SQL Injection Attack by W4RL0CK =========================================================== VENDOR: Sunbyte URL: http://www.sunbyte.net/ APP: Sunbyte e-Flower eCommerce webapp APP SITE:...
Webscene eCommerce (level) Remote Sql Injection
Webscene eCommerce level Remote Sql Injection vendor : http://www.webscenesolutions.com/ecommerce-shopping-websites-edinburgh.htm Bug Found By :Angela Chang 14-10-2008 contact: angelatch4ng.cc Greetz: nyubi & Vrs-Chk vuln file : productlist.php Input passed to the "level" is not properly verified...
webscene-sql.txt
Webscene eCommerce level Remote Sql Injection vendor : http://www.webscenesolutions.com/ecommerce-shopping-websites-edinburgh.htm Bug Found By :Angela Chang 14-10-2008 contact: angelatch4ng.cc Greetz: nyubi & Vrs-Chk vuln file : productlist.php Input passed to the "level" is not properly verified...