67 matches found
WordPress Theme EvoLve 1.2.5 - s Cross-Site Scripting
WordPress Theme EvoLve 1.2.5 - s Cross-Site Scripting source: https://www.securityfocus.com/bid/49872/info The EvoLve theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
WordPress Theme EvoLve 1.2.5 - 's' Cross-Site Scripting
source: https://www.securityfocus.com/bid/49872/info The EvoLve theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...
WordPress EvoLve Theme 1.2.5 - Cross-Site Scripting
's' Parameter WordPress EvoLve theme's "s" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...
CVE-2011-3852
Cross-site scripting XSS vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3852
Cross-site scripting XSS vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3852
The CVE-2011-3852 entry concerns the EvoLve WordPress theme (pre-1.2.6). The vulnerability is a cross-site scripting (XSS) flaw in the theme’s handling of the s parameter, allowing remote attackers to inject arbitrary script or HTML into victims’ browsers. The root cause is inadequate input clean...
CVE-2011-3852: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
PT-2011-4728 · Unknown · Evolve Theme
Name of the Vulnerable Software and Affected Versions: EvoLve theme versions prior to 1.2.6 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can be exploited by sending malicious input to the vulnerable endpoint...
Evolve < 1.2.6 - XSS
The evolve WordPress theme was affected by a XSS security vulnerability...
CVE-2006-6207
SQL injection vulnerability in products.asp in Evolve shopping cart aka Evolve Merchant allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error...
CVE-2006-6207
The CVE-2006-6207 issue affects the Evolve shopping cart (aka Evolve Merchant) where the products.asp page processes the partno parameter. The root cause is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands on the backend database. Reported impact is cap...
CVE-2006-6207
SQL injection vulnerability in products.asp in Evolve shopping cart aka Evolve Merchant allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error...
CVE-2006-6207: Undefined Security Weakness
SQL injection vulnerability in products.asp in Evolve shopping cart aka Evolve Merchant allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error...
PT-2006-6837 · Evolve · Evolve Shopping Cart
Name of the Vulnerable Software and Affected Versions: Evolve shopping cart affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the partno parameter in the "products.asp" page. This enables attackers to manipulate the database. The...
aria-evolve.txt
Aria-Security Team Advisory ----------------------------------------------------------- Software: Evolve shopping cart Method: SQL Injection PoC: http://target/path/products.asp?partno=SQL INJECTION Contact: [email protected]...
Evolve Shopping Cart - products.asp SQL Injection
Evolve Shopping Cart - products.asp SQL Injection source: https://www.securityfocus.com/bid/21323/info Evolve Shopping Cart is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...
[Aria-Security Team] Evolve shopping cart SQL Injection Vulnerability
Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian ----------------------------------------------------------- Software: Evolve shopping cart Method: SQL Injection PoC: http://target/path/products.asp?partno=SQL INJECTION Contact:...