514 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-2144
Cross-site scripting XSS vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-2144
CVE-2010-2144 describes a cross-site scripting (XSS) vulnerability in SignInForm.php of the Zeeways eBay Clone Auction Script, exploitable by remote attackers via the msg parameter. Affected component: signinform.php; vulnerability arises from improper handling of user-supplied input leading to s...
Facebook Now Trending As Phishing Target
Between January and March 2010, Facebook was the first social networking site to have made it into the list of top targets for phishing attacks. With 5.7% of all phishing attacks, Facebook took fourth place behind the traditional phishing targets PayPal, eBay and international bank HSBC, said...
70 eBay Phishing Suspects Arrested
Romanian police have arrested 70 suspected cybercrooks, thought to be members of three gangs which allegedly used compromised eBay accounts to run scams. Read the full article. The Register...
Trojan Watch: Fake eBay Security Email
A new blended email threat appears to be a security alert from eBay, said researchers. The email message with the subject line “eBay Procedural Warning – Security Alert,” is addressed to “Dear eBay Member,” and warns recipients that the sender has “detected security issues on behalf of your...
eBay Has Cross Site Forgery Flaw
eBay is working on a fix for a cross-site request forgery problem that could allow an attacker to change a user’s password and get access to that user’s account. Read the full article. eWEEK...
Fraudulent eBay Cookie-Code Stuffer Busted
Federal authorities are charging a Las Vegas man with marketing a so-called “cookie-stuffing” operation, enriching himself and others while defrauding eBay along the way. Read the full article. Wired...
Ebay Clone from clone2009 SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ======================================================= Ebay Clone from clone2009 SQL Injection Vulnerabilities ======================================================= / Name : Ebay Clone from clone2009.com Site : http://www.clone2009.com/...
Ebay Clone from clone2009 - SQL Injection
Ebay Clone from clone2009 - SQL Injection / Name : Ebay Clone from clone2009.com Site : http://www.clone2009.com/ Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , GreyMen : / 1st SQL injection : File : gotourl.php , Get : id HOST/PATH/gotourl.php?id=-1+union+select+version-- ...
Ebay Clone from clone2009 - SQL Injection
/ Name : Ebay Clone from clone2009.com Site : http://www.clone2009.com/ Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , GreyMen : / 1st SQL injection : File : gotourl.php , Get : id HOST/PATH/gotourl.php?id=-1+union+select+version-- = You will be redirected to...
Banking Phisher Facing 5 Years In Prison
A Romanian national pleaded guilty to a charge related to a phishing operation that sought to defraud customers of banks such as Citibank and Wells Fargo, and of Web sites such as eBay. Read the full article. Computerworld...
CVE-2009-3712
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php; and the itemid parameter to 2 viewfullsize.php, 3 classifidead.php, and 4 crosspromoteitems.php...
Sql injection
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php; and the itemid parameter to 2 viewfullsize.php, 3 classifidead.php, and 4 crosspromoteitems.php...
CVE-2009-3712
CVE-2009-3712 describes multiple SQL injection vulnerabilities in Ebay Clone 2009 that allow remote attackers to execute arbitrary SQL commands through user_id in feedback.php and item_id in view_full_size.php, classifide_ad.php, and crosspromoteitems.php. The underlying issue is improper handlin...
CVE-2009-3712
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php; and the itemid parameter to 2 viewfullsize.php, 3 classifidead.php, and 4 crosspromoteitems.php...
CVE-2009-2894
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to productdesc.php, and the cid parameter to 2 showcategory.php and 3 gallery.php...
Sql injection
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to productdesc.php, and the cid parameter to 2 showcategory.php and 3 gallery.php...
CVE-2009-2894
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to productdesc.php, and the cid parameter to 2 showcategory.php and 3 gallery.php...
CVE-2009-2894
CVE-2009-2894 affects Ebay Clone 2009, with multiple SQL injection flaws that allow remote attackers to alter the database by supplying crafted values to (1) id in product_desc.php and (2) cid in showcategory.php and (3) gallery.php. Root cause: improper input handling enabling SQL commands to be...