Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Apache Open For Business Project aka OFBiz 09.04 and earlier, as used in Opentaps, Neogia, and Entente Oya, allow remote attackers to inject arbitrary web script or HTML via 1 the productStoreId parameter to control/exportProductListing, 2...

MetaCart Free eCommerce Shopping Cart Database Disclosure

======================================================================================== | Title : Asp - MetaCart Free eCommerce Shopping Cart Backup Dump Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Dork : Powered by MetaCart | Bug : Backup ====================== Exploit By...

Interchange Detection

This host is running Interchange, an open source ecommerce system and application server/component application, written in the Perl programming language. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Interchange Detection

This host is running Interchange, an open source ecommerce system and application server/component application, written in the Perl programming language. OpenVAS Vulnerability Test $Id: gbinterchangewebdetect.nasl 5723 2017-03-24 15:46:34Z cfi $ Interchange Detection Authors: Michael Meyer...

osCMax 2.0 fckeditor upload vulnerability exploit-vulnerability warning-the black bar safety net

osCMax V2. 0 is a powerful e-commerce/shopping cart Web application, there are many benefits, as you are using osCMax e-commerce/shopping cart for your website. It has all it takes to run a successful online store can feature By customizing your In Need of any configuration. osCMax 2.0 is based o...

B2B eCommerce SQL Injection

B2B ecommerce for small business factoring Url| http://www.example.com/buyoffers.php?pg=2&cid=sql injection Union Columns = 8 google : inurl:buyoffers.php? / hakerzy ze szkocji ; ------------------------------ ---- DUNDEE ----- POLISH ----- ------------------------------ MoJaCiPkA4 / majki --...

PHP-Nuke Module Emporium 2.3.0 (id_catg) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== PHP-Nuke Module Emporium 2.3.0 idcatg SQL Injection Vulnerability ==================================================================== ||| PHP-Nuke Module Emporium 2.3.0...

PHP-Nuke Emporium 2.3.0 SQL Injection

||| PHP-Nuke Module Emporium 2.3.0 idcatg SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| DorK : inurl:modules.php?name=ShoppingCart ||| more Module's Name: Emporium Module's Version: 2.3.0 Module's Description: eCommerce for PHP-Nuk...

Vulnerabilities in Cetera CMS

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в Cetera eCommerce. Insufficient Anti-automation: http://site/ http://site/account/ На данных страницах отсутствует защита от автоматизированных запросов капча. XSS:...

PHP-Nuke Module Emporium 2.3.0 - 'id_catg' SQL Injection

||| PHP-Nuke Module Emporium 2.3.0 idcatg SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| DorK : inurl:modules.php?name=ShoppingCart ||| more Module's Name: Emporium Module's Version: 2.3.0 Module's Description: eCommerce for PHP-Nuk...

PHP-Nuke Module Emporium 2.3.0 - id_catg SQL Injection

PHP-Nuke Module Emporium 2.3.0 - idcatg SQL Injection ||| PHP-Nuke Module Emporium 2.3.0 idcatg SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| DorK : inurl:modules.php?name=ShoppingCart ||| more Module's Name: Emporium Module's...

Pre Multi-Vendor Ecommerce SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.preproject.com ? Software: PRE MULTI-VENDOR E-COMMERCE SOLUTION ? ? author: R3d-D3v!L ? group: 4.!.5 ? Date: 18.dec.2009 ? T!ME: 05:00 pm ? Home:...

Unfixed XSS vulnerability at accessorygeeks.ecommerce-site-search.com

Security researcher tenest, has submitted on 11/01/2009 a cross-site-scripting XSS vulnerability affecting accessorygeeks.ecommerce-site-search.com, which at the time of submission ranked 33041 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CubeCart 4 Session Management Bypass

No description provided by source. CubeCart 4 Session Management Bypass Release Date: 2009/10/29 Author: Bogdan Calin bogdan at acunetix dot com Severity: Critical Vendor Status: Vendor has released an updated version I. Background From Wikipedia: CubeCart is a free-to-use eCommerce software...

CubeCart 4 Session Management Bypass

CubeCart 4 Session Management Bypass Release Date: 2009/10/29 Author: Bogdan Calin bogdan at acunetix dot com Severity: Critical Vendor Status: Vendor has released an updated version I. Background From Wikipedia: CubeCart is a free-to-use eCommerce software solution, designed to allow individuals...

CubeCart 4 - Session Management Bypass

CubeCart 4 Session Management Bypass Release Date: 2009/10/29 Author: Bogdan Calin bogdan at acunetix dot com Severity: Critical Vendor Status: Vendor has released an updated version I. Background From Wikipedia: CubeCart is a free-to-use eCommerce software solution, designed to allow individuals...

CubeCart 4 Session Management Bypass

Exploit for unknown platform in category web applications ==================================== CubeCart 4 Session Management Bypass ==================================== CubeCart 4 Session Management Bypass Severity: Critical Vendor Status: Vendor has released an updated version I. Background From...

[BONSAI] SQL Injection in CS-Cart

Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ SQL Injection in CS-Cart 1. Advisory Information Title: SQL Injection in CS-Cart Advisory ID: BONSAI-2009-0100 Advisory URL: http://www.bonsai-sec.com/research/vulnerabilities/cs-cartSQL-injection-0100.txt Date published:...

Joomla! Component IXXO Cart! Standalone and - SQL Injection

Joomla! Component IXXO Cart! Standalone and - SQL Injection Original advisory at: http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/ Ref. DSF-03-2009 – IXXO Cart! Standalone and Joomla Component SQL Injection Vendor: IXXO Internet Solutions Status:...

IXXO Cart! Standalone and Joomla Component SQL Injection

Original advisory at: http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/ Ref. DSF-03-2009 – IXXO Cart! Standalone and Joomla Component SQL Injection Vendor: IXXO Internet Solutions Status: Patched by vendor IXXO Cart! IXXO Cart is an extremely powerful p...