86 matches found
CVE-2007-4627: Undefined Security Weakness
SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2003-0586
Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php...
CVE-2003-0585
SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the 1 user or 2 pass parameters...
eStore SQL Injection Vulnerability & Path Disclosure
1ndonesian Security Team 1st http://bosen.net/releases/ ============================================================== Security Advisory Advisory Name: eStore SQL Injection Vulnerability & Path Disclosure Release Date: 07/15/2003 Application: eStore 1.0.1 eStore 1.0.2 eStore 1.0.2b Platform: PHP...
eStore 1.0.11.0.2 - Settings.inc.php Full Path Disclosure
eStore 1.0.11.0.2 - Settings.inc.php Full Path Disclosure source: https://www.securityfocus.com/bid/8220/info eStore is prone to a path disclosure vulnerability. It has been reported that a remote attacker may make a direct HTTP request for an eStore include script and in doing so trigger an erro...
eStore 1.0.1/1.0.2 - 'Settings.inc.php' Full Path Disclosure
source: https://www.securityfocus.com/bid/8220/info eStore is prone to a path disclosure vulnerability. It has been reported that a remote attacker may make a direct HTTP request for an eStore include script and in doing so trigger an error. The resulting error message will disclose potentially...