Directory traversal

Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php...

CVE-2015-2244

Multiple cross-site scripting XSS vulnerabilities in Webshop hun 1.062S allow remote attackers to inject arbitrary web script or HTML via the 1 param, 2 center, 3 lap, 4 termid, or 5 nyelvid parameter to index.php...

CVE-2015-2243

Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php...

PT-2015-5683

Name of the Vulnerable Software and Affected Versions Webshop hun version 1.062S Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the termid or nyelv id parameter to the "index.php" endpoint. Recommendations For version 1.062S, consider...

PT-2015-5684

Name of the Vulnerable Software and Affected Versions Webshop hun version 1.062S Description A directory traversal issue exists, allowing remote attackers to have an unspecified impact by using directory traversal sequences in the mappa parameter to the "index.php" endpoint. Recommendations For...

CVE-2015-2242: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the 1 termid or 2 nyelvid parameter to index.php...

CVE-2015-2244: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Webshop hun 1.062S allow remote attackers to inject arbitrary web script or HTML via the 1 param, 2 center, 3 lap, 4 termid, or 5 nyelvid parameter to index.php...

PT-2015-5685

Name of the Vulnerable Software and Affected Versions Webshop hun version 1.062S Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters in index.php, specifically the param, center, lap, termid, or nyelv id parameters. Recommendations For...

CVE-2015-2243: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php...

PHP Betoffice (Betster) 1.0.4 - Authentication Bypass SQL Injection

PHP Betoffice Betster 1.0.4 - Authentication Bypass SQL Injection ?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX /...

Design/Logic Flaw

DLGuard 4.5 allows remote attackers to obtain the installation path via the c parameter to index.php...

PT-2015-5663

Name of the Vulnerable Software and Affected Versions DLGuard version 4.5 Description The issue allows remote attackers to obtain the installation path. This is achieved via the c parameter to the "index.php" endpoint. Recommendations For DLGuard version 4.5, consider restricting access to the...

Webshop Hun 1.062S SQL Injection

Webshop hun v1.062S SQL Injection Security Vulnerabilities Exploit Title: Webshop hun v1.062S /index.php Multiple Parameters SQL Injection Security Vulnerabilities Product: Webshop hun Vendor: Webshop hun Vulnerable Versions: v1.062S Tested Version: v1.062S Advisory Publication: Mar 04, 2015 Late...

Webshop Hun 1.062S Cross Site Scripting

Webshop hun v1.062S XSS Cross-site Scripting Security Vulnerabilities Exploit Title: Webshop hun v1.062S /index.php Multiple Parameters XSS Security Vulnerabilities Product: Webshop hun Vendor: Webshop hun Vulnerable Versions: v1.062S Tested Version: v1.062S Advisory Publication: Mar 04, 2015...

CVE-2015-2209: Exposure of Sensitive Information to an Unauthorized Actor

DLGuard 4.5 allows remote attackers to obtain the installation path via the c parameter to index.php...

DLGuard SQL Injection Vulnerability

DLGuard is a complete sales and customer management system used to protect and streamline online business. A SQL injection vulnerability exists in DLGuard version 4.5, which stems from the index.php script failing to adequately filter the 'c' parameter. A remote attacker can exploit this...

Sql injection

SQL injection vulnerability in DLGuard 4.5 allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php...

CVE-2015-2064

Multiple cross-site scripting XSS vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 c, or 3 redirect parameter to index.php or 4 search field searchTerm parameter in the main page...

CVE-2015-2064

Multiple cross-site scripting XSS vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 c, or 3 redirect parameter to index.php or 4 search field searchTerm parameter in the main page...

PT-2015-5577

Name of the Vulnerable Software and Affected Versions DLGuard versions 4.5 through 5 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including the page, c, or redirect parameter to index.php, or the searchTerm parameter in the main...