CVE-2006-0854

PHP remote file inclusion vulnerability in common.php in Intensive Point iUser Ecommerce allows remote attackers to include arbitrary files via a URL in the includepath variable, which is not initialized before being used...

CVE-2006-0854

CVE-2006-0854 describes a PHP remote file inclusion in Intensive Point iUser Ecommerce. The vulnerability arises because common.php uses the include_path without initialization, allowing an attacker to include arbitrary files via a URL. Per NVD, the CVSS v2 base score is 7.5 (HIGH). The connected...

CVE-2006-0854

PHP remote file inclusion vulnerability in common.php in Intensive Point iUser Ecommerce allows remote attackers to include arbitrary files via a URL in the includepath variable, which is not initialized before being used...

XOR-iUser.txt

------=Part352119317884.1140054596440 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=...

[Full-disclosure] iUser Ecommerce - Remote Command Execution Vulnerability

======================================================================================= XOR Crew :: Security Advisory 1/10/2006 ======================================================================================= iUser Ecommerce - Remote Command Execution Vulnerability...

OpenEdit XSS vuln.

OpenEdit XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/openedit-xss-vuln.html vendor:http://www.openedit.org affected version:4.0 and prior Product Description: Developed in partnership with Web designers, OpenEdit offers a host of...

CVE-2005-4035

Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 prod, and 2 brid parameters to a view.php; the 3 the bid parameter to b viewbrands.php; and the 4 grp and 5 cat parameters to...

CVE-2005-4035

Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 prod, and 2 brid parameters to a view.php; the 3 the bid parameter to b viewbrands.php; and the 4 grp and 5 cat parameters to...

CVE-2005-4035

CVE-2005-4035 concerns SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier. The flaws allow remote attackers to execute arbitrary SQL commands via the (1) prod and (2) brid parameters to view.php; the (3) bid parameter to viewbrands.php; and the (4) grp and (5...

Web4Future eCommerce Enterprise Edition 2.1 - 'view.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. eCommer...

Web4Future eCommerce Enterprise Edition 2.1 - viewbrands.php?bid SQL Injection

Web4Future eCommerce Enterprise Edition 2.1 - viewbrands.php?bid SQL Injection source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to...

Web4Future eCommerce Enterprise Edition 2.1 - 'viewbrands.php?bid' SQL Injection

source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. eCommer...

Web4Future eCommerce Enterprise Edition 2.1 - index.php Multiple SQL Injections

Web4Future eCommerce Enterprise Edition 2.1 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to...

Web4Future eCommerce Enterprise Edition v2.1 SQL inj. vuln.

Web4Future eCommerce Enterprise Edition v2.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ecommerce-enterprise-edition-sql-inj.html vendor:http://www.web4future.com/products.php?p=ecomm affected version:v2.1 and prior Product...

Web4Future eCommerce Enterprise Edition 2.1 - view.php Multiple SQL Injections

Web4Future eCommerce Enterprise Edition 2.1 - view.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to...

Web4Future eCommerce Enterprise Edition 2.1 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. eCommer...

redhat Interchange

It seems that 'Red Hat Interchange' ecommerce and dynamic content management application is running in 'Inet' mode on this port. Versions 4.8.5 and earlier are flawed and may disclose contents of sensitive files to attackers. OpenVAS neither checked Interchange version nor tried to exploit the...

redhat Interchange

It seems that SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Note: this service is not a web server, but it looks like it for findservice HEAD...

Unintentionally logging credit card transactions

Solar Designer of the Openwall Project reported a security vulnerability in the contributed authorizenet module which is part of the ecommerce package. Credit card information was being stored in a system log file. The system should not be saving this information. Versions affected Please check t...

phpshopSQL.txt

----------------------------------------------------- Nightmare TeAmZ Advisory 007 ------------------------------------------------------ Date - 10/2005 PhpShop Sql Injction AFFECTED PRODUCTS ================= PhpShop http://www.virtualdimensions.co.uk OVERVIEW ======== This is a great ecommerce...