Vulnerabilities in Cetera CMS

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в Cetera eCommerce. Insufficient Anti-automation: http://site/ http://site/account/ На данных страницах отсутствует защита от автоматизированных запросов капча. XSS:...

PHP-Nuke Emporium 2.3.0 SQL Injection

||| PHP-Nuke Module Emporium 2.3.0 idcatg SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| DorK : inurl:modules.php?name=ShoppingCart ||| more Module's Name: Emporium Module's Version: 2.3.0 Module's Description: eCommerce for PHP-Nuk...

PHP-Nuke Module Emporium 2.3.0 - 'id_catg' SQL Injection

||| PHP-Nuke Module Emporium 2.3.0 idcatg SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| DorK : inurl:modules.php?name=ShoppingCart ||| more Module's Name: Emporium Module's Version: 2.3.0 Module's Description: eCommerce for PHP-Nuk...

PHP-Nuke Module Emporium 2.3.0 - id_catg SQL Injection

PHP-Nuke Module Emporium 2.3.0 - idcatg SQL Injection ||| PHP-Nuke Module Emporium 2.3.0 idcatg SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| DorK : inurl:modules.php?name=ShoppingCart ||| more Module's Name: Emporium Module's...

Pre Multi-Vendor Ecommerce SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.preproject.com ? Software: PRE MULTI-VENDOR E-COMMERCE SOLUTION ? ? author: R3d-D3v!L ? group: 4.!.5 ? Date: 18.dec.2009 ? T!ME: 05:00 pm ? Home:...

Unfixed XSS vulnerability at accessorygeeks.ecommerce-site-search.com

Security researcher tenest, has submitted on 11/01/2009 a cross-site-scripting XSS vulnerability affecting accessorygeeks.ecommerce-site-search.com, which at the time of submission ranked 33041 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CubeCart 4 Session Management Bypass

No description provided by source. CubeCart 4 Session Management Bypass Release Date: 2009/10/29 Author: Bogdan Calin bogdan at acunetix dot com Severity: Critical Vendor Status: Vendor has released an updated version I. Background From Wikipedia: CubeCart is a free-to-use eCommerce software...

CubeCart 4 Session Management Bypass

CubeCart 4 Session Management Bypass Release Date: 2009/10/29 Author: Bogdan Calin bogdan at acunetix dot com Severity: Critical Vendor Status: Vendor has released an updated version I. Background From Wikipedia: CubeCart is a free-to-use eCommerce software solution, designed to allow individuals...

CubeCart 4 - Session Management Bypass

CubeCart 4 Session Management Bypass Release Date: 2009/10/29 Author: Bogdan Calin bogdan at acunetix dot com Severity: Critical Vendor Status: Vendor has released an updated version I. Background From Wikipedia: CubeCart is a free-to-use eCommerce software solution, designed to allow individuals...

CubeCart 4 Session Management Bypass

Exploit for unknown platform in category web applications ==================================== CubeCart 4 Session Management Bypass ==================================== CubeCart 4 Session Management Bypass Severity: Critical Vendor Status: Vendor has released an updated version I. Background From...

[BONSAI] SQL Injection in CS-Cart

Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ SQL Injection in CS-Cart 1. Advisory Information Title: SQL Injection in CS-Cart Advisory ID: BONSAI-2009-0100 Advisory URL: http://www.bonsai-sec.com/research/vulnerabilities/cs-cartSQL-injection-0100.txt Date published:...

Joomla! Component IXXO Cart! Standalone and - SQL Injection

Joomla! Component IXXO Cart! Standalone and - SQL Injection Original advisory at: http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/ Ref. DSF-03-2009 – IXXO Cart! Standalone and Joomla Component SQL Injection Vendor: IXXO Internet Solutions Status:...

IXXO Cart! Standalone and Joomla Component SQL Injection

Original advisory at: http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/ Ref. DSF-03-2009 – IXXO Cart! Standalone and Joomla Component SQL Injection Vendor: IXXO Internet Solutions Status: Patched by vendor IXXO Cart! IXXO Cart is an extremely powerful p...

Zen Cart 1.3.8 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...

Zen Cart 1.3.8 Remote SQL Execution Exploit

No description provided by source. !/usr/bin/python ------- Zen Cart 1.3.8 Remote SQL Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : Notes: must have...

Zen Cart Ecommerce 1.3.8 Code Execution

!/usr/bin/php | ======================================================================== | | | $system php $argv0 | | Notes: ex: http://victim.com/site no slash | | | ======================================================================== ";exit1; $url = $argv1; $trick = "/passwordforgotten.php"...

Zen Cart Ecommerce 1.3.8 SQL Injection

!/usr/bin/python ------- Zen Cart 1.3.8 Remote SQL Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : Notes: must have admin/sqlpatch.php enabled clean the databas...

Infinities eCommerce SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com d3hydr8 - rsauron - baltazar - low1z - houbysoft - beenu and all darkc0de members Author: p47r1ck Home : www.darkc0de.com Email :...

virtuemart 1.1.2 - Multiple Vulnerabilities

Author: Janek Vind "waraxe" Date: 24. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-71.html Description of vulnerable software: VirtueMart is an Open Source E-Commerce solution to be used together with a Content Management System CMS called Joomla! and Mambo. Joomla! an...

Design/Logic Flaw

Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...