CVE-2004-0301

Cross-site scripting XSS vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter...

CVE-2004-0300: Undefined Security Weakness

SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via 1 the cat parameter in shop.php, 2 the id parameter in more.php, 3 the catmanufacturer parameter in shopbybrand.php, or 4 the id parameter in listing.php...

CVE-2004-0301: Undefined Security Weakness

Cross-site scripting XSS vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter...

ZH2004-07SA.txt

ZH2004-07SA security advisory: Multiple Sql injection vulnerabilities in Online Store Kit 3.0 Products Lite - Standard and Pro Published: 17 february 2004 Released: 17 february 2004 Name: Online Store Kit Products Lite - Standard - Pro Affected Systems: 3.0 Issue: Sql Injection Vulnerability...

eCommerce Corporation Online Store Kit 3.0 - shop_by_brand.php?cat_manufacturer SQL Injection

eCommerce Corporation Online Store Kit 3.0 - shopbybrand.php?catmanufacturer SQL Injection source: https://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of...

ZH2004-07SA (security advisory): Multiple Sql injection vulnerabilities in Online Store Kit 3.0 Products (Lite - Standard and Pro)

ZH2004-07SA security advisory: Multiple Sql injection vulnerabilities in Online Store Kit 3.0 Products Lite - Standard and Pro Published: 17 february 2004 Released: 17 february 2004 Name: Online Store Kit Products Lite - Standard - Pro Affected Systems: 3.0 Issue: Sql Injection Vulnerability...

eCommerce Corporation Online Store Kit 3.0 - 'shop_by_brand.php?cat_manufacturer' SQL Injection

source: https://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of user-supplied input via the URI. As a result of this a malicious user may influence database...

[UNIX] Online Store Kit SQL Injection Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2003-1156

Java Runtime Environment JRE and Software Development Kit SDK 1.4.2 through 1.4.202 allows local users to overwrite arbitrary files via a symlink attack on 1 unpack.log, as created by the unpack program, or 2 .mailcap1 and .mime.types1, as created by the RPM program...

Multiple jre/jdk installation symbolic link bugs

No description provided...

[Full-Disclosure] [bWM#017] Cross-Site-Scripting @ PHPKIT

http://badWebMasters.net ben moeckel security research ------------------------------------------------- badWebMasters security advisory 017 Cross Site Scripting @ PHP-Kit Discovery date: 2003-09 Original advisory: http://badwebmasters.net/advisory/017/ text/html Legal Notice: Copyright 2003 by...

CVE-2002-1525

Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. dot dot attack on port 1 6015 or 2 6016, or 3 an absolute pathname to port 6017...

CVE-2002-1525

CVE-2002-1525 concerns a directory traversal vulnerability in the ASTAware SearchDisk engine of Sun ONE Starter Kit 2.0. The flaw allows remote attackers to read arbitrary files via a .. (dot dot) path traversal on ports 6015 or 6016, or through an absolute pathname to port 6017. The available re...

CVE-2002-1525: Undefined Security Weakness

Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. dot dot attack on port 1 6015 or 2 6016, or 3 an absolute pathname to port 6017...

eCommerce Corporation Online Store Kit 3.0 - More.php Cross-Site Scripting

eCommerce Corporation Online Store Kit 3.0 - More.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9676/info Multiple vulnerabilities have been identified in the software due to improper sanitization of user-supplied input. Successful exploitation of these issues could allow an...

eCommerce Corporation Online Store Kit 3.0 - More.php?id SQL Injection

eCommerce Corporation Online Store Kit 3.0 - More.php?id SQL Injection source: https://www.securityfocus.com/bid/9676/info Multiple vulnerabilities have been identified in the software due to improper sanitization of user-supplied input. Successful exploitation of these issues could allow an...

eCommerce Corporation Online Store Kit 3.0 - 'More.php?id' SQL Injection

source: https://www.securityfocus.com/bid/9676/info Multiple vulnerabilities have been identified in the software due to improper sanitization of user-supplied input. Successful exploitation of these issues could allow an attacker to carry out cross-site scripting and SQL injection attacks via th...

eCommerce Corporation Online Store Kit 3.0 - 'More.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9676/info Multiple vulnerabilities have been identified in the software due to improper sanitization of user-supplied input. Successful exploitation of these issues could allow an attacker to carry out cross-site scripting and SQL injection attacks via th...

Sun ONE Starter Kit 2.0 ASTAware SearchDisc 3.1 - Search Engine Directory Traversal

Sun ONE Starter Kit 2.0 ASTAware SearchDisc 3.1 - Search Engine Directory Traversal source: https://www.securityfocus.com/bid/5828/info A vulnerability has been reported for the Sun ONE Starter Kit 2.0 and ASTAware SearchDisc. The Starter Kit includes a search engine facility provided for easy...

[LoWNOISE] "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware

LoWNOISE "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware by Efrain 'ET' Torres, Colombia 2002. [email protected] +Disclaimer: blah. +Product: -SunONE Starter Kit v2.0 Sun Microsystems CD-ROM Version -ASTAware SearchDisk 2002. ASTAWARE Technologies Inc. +Introduction You are one of...