2583 matches found
sunbyte-sql.txt
=========================================================== SunByte e-Flower SQL Injection Attack by W4RL0CK =========================================================== VENDOR: Sunbyte URL: http://www.sunbyte.net/ APP: Sunbyte e-Flower eCommerce webapp APP SITE:...
Webscene eCommerce (level) Remote Sql Injection
Webscene eCommerce level Remote Sql Injection vendor : http://www.webscenesolutions.com/ecommerce-shopping-websites-edinburgh.htm Bug Found By :Angela Chang 14-10-2008 contact: angelatch4ng.cc Greetz: nyubi & Vrs-Chk vuln file : productlist.php Input passed to the "level" is not properly verified...
Webscene eCommerce - productlist.php SQL Injection
Webscene eCommerce - productlist.php SQL Injection source: https://www.securityfocus.com/bid/31755/info Webscene eCommerce is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...
Webscene eCommerce - 'productlist.php' SQL Injection
source: https://www.securityfocus.com/bid/31755/info Webscene eCommerce is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...
webscene-sql.txt
Webscene eCommerce level Remote Sql Injection vendor : http://www.webscenesolutions.com/ecommerce-shopping-websites-edinburgh.htm Bug Found By :Angela Chang 14-10-2008 contact: angelatch4ng.cc Greetz: nyubi & Vrs-Chk vuln file : productlist.php Input passed to the "level" is not properly verified...
major_rls54.txt
MajorSecurity Advisory 54xt:Commerce - Cross Site Scripting and Session Fixation Issues Details ======= Product: xt:Commerce Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.xtcommerce-shop.com/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered...
Zen Cart <= 1.3.8a SQL Injection
GulfTech Security Research September 04, 2008 Vendor : Zen Ventures, LLC URL : http://www.zen-cart.com Version : Zen Cart = 1.3.8a Risk : SQL Injection Description: Zen Cart is a full featured open source ecommerce web application written in php that allows users to build, run and promote their o...
Zen Cart 1.3.8a - SQL Injection
Zen Cart 1.3.8a - SQL Injection Zen Cart SQL Injection Vendor: Zen Ventures, LLC Product: Zen Cart Version: = 1.3.8a Website: http://www.zen-cart.com BID: 31023 CVE: CVE-2008-6985 OSVDB: 48346 SECUNIA: 31758 PACKETSTORM: 69640 Description: Zen Cart is a full featured open source ecommerce web...
Zen Cart < 1.3.8a - SQL Injection
Zen Cart SQL Injection Vendor: Zen Ventures, LLC Product: Zen Cart Version: = 1.3.8a Website: http://www.zen-cart.com BID: 31023 CVE: CVE-2008-6985 OSVDB: 48346 SECUNIA: 31758 PACKETSTORM: 69640 Description: Zen Cart is a full featured open source ecommerce web application written in php that...
CS-Cart <= 1.3.5 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build, r...
cscart-sql.txt
GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build, run and promote an online store. The...
CS-Cart <= 1.3.5 (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== CS-Cart = 1.3.5 Auth Bypass SQL Injection Vulnerability ========================================================== GulfTech Security Research September 02, 2008 Vendor : CS-Cart.co...
CS-Cart 1.3.5 - Authentication Bypass
CS-Cart 1.3.5 - Authentication Bypass GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build...
XSS and Data Manipulation attacks found in CMS PHPCart.
. . | / | | | / / | |/ // / / / |/ / // | / | | / / / // / |/| || /| / / / / / / / / | | / / / | // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE -r45c4l -Bond Author: h4x0r Home :...
CVE-2008-3841
Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway eCommerce 1.4.1.171 allows remote attackers to inject arbitrary web script or HTML via the searchlink parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway eCommerce 1.4.1.171 allows remote attackers to inject arbitrary web script or HTML via the searchlink parameter...
CVE-2008-3841
Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway eCommerce 1.4.1.171 allows remote attackers to inject arbitrary web script or HTML via the searchlink parameter...
CVE-2008-3841
Technical details about CVE-2008-3841 are not publicly available in the provided connected documents. The initial description notes an XSS in Freeway eCommerce 1.4.1.171, but no vendor/versions/impact/fix are elaborated here. Monitor for updates.
phpcart-xss.txt
. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE -r45c4l -Bond...
SunShop Shopping Cart 4.1.4 - 'id' SQL Injection
GulfTech Security Research August 18, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : SunShop queryfirst"SELECT FROM ".$dbprefix."usersregistry WHERE id='".$POSTid."' AND userid='".$sess-gvar'userid'."'"; $data = filterdata$data; $out =...