Web4Future eCommerce Enterprise Edition v2.1 SQL inj. vuln.

Web4Future eCommerce Enterprise Edition v2.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ecommerce-enterprise-edition-sql-inj.html vendor:http://www.web4future.com/products.php?p=ecomm affected version:v2.1 and prior Product...

Web4Future eCommerce Enterprise Edition 2.1 - index.php Multiple SQL Injections

Web4Future eCommerce Enterprise Edition 2.1 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to...

Web4Future eCommerce Enterprise Edition 2.1 - viewbrands.php?bid SQL Injection

Web4Future eCommerce Enterprise Edition 2.1 - viewbrands.php?bid SQL Injection source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to...

Web4Future eCommerce Enterprise Edition 2.1 - view.php Multiple SQL Injections

Web4Future eCommerce Enterprise Edition 2.1 - view.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to...

Web4Future eCommerce Enterprise Edition 2.1 - 'viewbrands.php?bid' SQL Injection

source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. eCommer...

Web4Future eCommerce Enterprise Edition 2.1 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. eCommer...

Web4Future eCommerce Enterprise Edition 2.1 - 'view.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. eCommer...

redhat Interchange

It seems that 'Red Hat Interchange' ecommerce and dynamic content management application is running in 'Inet' mode on this port. Versions 4.8.5 and earlier are flawed and may disclose contents of sensitive files to attackers. OpenVAS neither checked Interchange version nor tried to exploit the...

redhat Interchange

It seems that SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Note: this service is not a web server, but it looks like it for findservice HEAD...

Unintentionally logging credit card transactions

Solar Designer of the Openwall Project reported a security vulnerability in the contributed authorizenet module which is part of the ecommerce package. Credit card information was being stored in a system log file. The system should not be saving this information. Versions affected Please check t...

phpshopSQL.txt

----------------------------------------------------- Nightmare TeAmZ Advisory 007 ------------------------------------------------------ Date - 10/2005 PhpShop Sql Injction AFFECTED PRODUCTS ================= PhpShop http://www.virtualdimensions.co.uk OVERVIEW ======== This is a great ecommerce...

[SA16903] Mall23 eCommerce "idOption_Dropdown_2" SQL Injection Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-3039

SQL injection vulnerability in infopage.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idPage parameter...

CVE-2005-3043

SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOptionDropdown2 parameter...

CVE-2005-3043

SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOptionDropdown2 parameter...

CVE-2005-3039

CVE-2005-3039 describes an SQL injection in Mall23 eCommerce where the infopage.asp script processes the idPage parameter, enabling remote arbitrary SQL execution. The issue arises from improper handling of user-supplied input in the SQL query, consistent with the CVSS data indicating network acc...

CVE-2005-3043

Mall23 eCommerce is affected by a SQL injection in AddItem.asp, allowing remote attackers to inject arbitrary SQL via idOption_Dropdown_2. The issue has CVSS2 base score 7.5 (HIGH) with network/low complexity/unauthenticated access and partial impact on confidentiality, integrity, and availabilit...

CVE-2005-3039

SQL injection vulnerability in infopage.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idPage parameter...

[SA16778] Mall23 eCommerce "idPage" SQL Injection Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2543

The CVE-2005-2543 entry describes a directory traversal vulnerability in Comdev eCommerce 3.0, specifically in wce.download.php, where the download parameter can be abused with a .. (dot dot) to download arbitrary files. Affected product/component: Comdev eCommerce 3.0 / wce.download.php. Root ca...