Get Tube - SQL Injection

----------------------------------------------------------------------------------------- Get Tube 4.51 & All Versions SQL Injection Vulnerability ----------------------------------------------------------------------------------------- +Title Get Tube 4.51 & All Versions SQL Injection...

ZeusCart Ecommerce Shopping Cart Software Cross-Site scripting Vulnerability

ZeusCart Ecommerce Shopping Cart Software Cross-Site scripting Vulnerability SecPod Technologies www.secpod.com Author Sooraj K.S SecPod ID: 1003 07/28/2010 Issue Discovered 07/30/2010 Vendor Notified No Response from Vendor Class: Cross-Site Scripting Severity: Medium Overview: --------- ZeusCar...

Digistore Ecommerce V4.0 Changer Login and Pass CSRF Vulnerability

Exploit for php platform in category web applications ================================================================== Digistore Ecommerce V4.0 Changer Login and Pass CSRF Vulnerability ==================================================================...

Digistore Ecommerce 4.0 File Disclosure / Backup Disclosure

==================================================== Digistore Ecommerce V4.0 File Disclosure Vulnerabilities Digistore Ecommerce V4.0 by Pass / Creat and Download Backup Vulnerability ====================================================...

Digistore Ecommerce 4.0 Shell Upload

======================================================================= Digistore Ecommerce V4.0 FCKeditor Remote Upload File Exploit ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

Digistore Ecommerce V4.0 by Pass / Creat and Download Backup

Exploit for php platform in category web applications ============================================================ Digistore Ecommerce V4.0 by Pass / Creat and Download Backup ============================================================...

Digistore Ecommerce V4.0 FCKeditor Remote Upload File / File Disclosure

Exploit for php platform in category web applications ======================================================================= Digistore Ecommerce V4.0 FCKeditor Remote Upload File / File Disclosure =======================================================================...

New vulnerabilities in Cetera eCommerce

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, SQL Injection и SQL DB Structure Extraction уязвимостях в Cetera eCommerce. XSS: http://site/cms/templates/search.php?q=111&sobject=223E3Cscript3Ealertdocument.cookie3C/script3E...

Cetera eCommerce - Multiple SQL Injections

source: https://www.securityfocus.com/bid/42058/info Cetera eCommerce is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues can allow an attacker to compromise the application, acces...

Cetera eCommerce - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Cetera eCommerce - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/42059/info Cetera eCommerce is prone to multiple cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using...

Cetera eCommerce 14.0 Cross Site Scripting / SQL Injection

============================================================= I want to warn you about security vulnerabilities in Cetera eCommerce. Which I disclosed already in December 2009 SecurityVulns ID: 10489. ----------------------------- Advisory: Vulnerabilities in Cetera eCommerce...

Cetera eCommerce - Multiple SQL Injections

Cetera eCommerce - Multiple SQL Injections source: https://www.securityfocus.com/bid/42058/info Cetera eCommerce is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues can allow an...

Cetera eCommerce - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42059/info Cetera eCommerce is prone to multiple cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code wou...

Freeway CMS 1.4.3.210 SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------- Freeway CMS 1.4.3.210 SQL Injection Vulnerability ----------------------------------------------------------------------------------------- +Title Freeway CMS 1.4.3.210 SQL...

Freeway CMS 1.4.3.210 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= Freeway CMS 1.4.3.210 SQL Injection Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

Freeway CMS 1.4.3.210 - SQL Injection

----------------------------------------------------------------------------------------- Freeway CMS 1.4.3.210 SQL Injection Vulnerability ----------------------------------------------------------------------------------------- +Title Freeway CMS 1.4.3.210 SQL Injection Vulnerability +Author...

Freeway CMS 1.4.3.210 SQL Injection

----------------------------------------------------------------------------------------- Freeway CMS 1.4.3.210 SQL Injection Vulnerability ----------------------------------------------------------------------------------------- +Title Freeway CMS 1.4.3.210 SQL Injection Vulnerability +Author...

Joomla! Component IXXO Cart - SQL Injection

Joomla! Component IXXO Cart - SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : IXXO Cart for Joomla SQLi Vulnerability Date : july 9,2010 Critical Level : HIGH vendor URL...

Joomla! Component IXXO Cart - SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : IXXO Cart for Joomla SQLi Vulnerability Date : july 9,2010 Critical Level : HIGH vendor URL :http://www.php-shop-system.com/ Author : Sid3^effects aKa HaRi specia...

Joomla IXXO Cart SQL Injection

====================================== IXXO Cart for Joomla SQLi Vulnerability ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database...