NIUSHOP open source mall system goods_id parameter SQL injection vulnerabilities exist

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NIUSHOP open source mall system goodsid parameter exists SQL injection vulnerability . As the parameter is...

FeiWa B2B2C mall system url parameter has remote file inclusion vulnerability

Flying Frog Mall System FeiWa B2B2C is an enterprise-level B2B2C e-commerce platform system, fully supporting PC, WAP, WeChat, APP and other terminal equipment. FeiWa B2B2C mall system url parameters exist remote file containment vulnerability. The vulnerability exists in the location "...

Ltd. Tpshop open source mall system SQL injection vulnerability

Tpshop open source mall system is a set of operators, suppliers, buyers, users distribution , etc., in the PC and mobile devices are compatible with the operation of a complete set of offline to online complete e-commerce eco-solutions. Ltd. Tpshop open source mall system version 1.2.9 SQL...

IMALL E-commerce Management System of Xiamen Techflood Software Co.

IMALL is an e-commerce management system of Xiamen Techflood Software Co. A design vulnerability exists in the IMALL e-commerce management system of Xiamen Techflood Software Co. An attacker can exploit the vulnerability to obtain database information and delete any order data in the database...

HiMall Multi-User Mall System Exists Arbitrary Password Reset Vulnerability

Hishop multi-user mall system is a multi-store support multi-vendor stationed, mainly for high-end customers, for traditional enterprises and large and medium-sized online business to improve the operational capacity of merchants as the core, similar to Jingdong, Tmall e-commerce platform. Hishop...

ShopBuilder module\adv\admin\adv. php, etc. 5 SQL injection

ShopBuilder description ShopBuilder is designed for large and medium-sized enterprises to develop the professional-level e-Commerce Mall system, powerful, safe and convenient, can carry tens of millions of views, make the enterprise low-cost to quickly build an online Mall, turn on the e-Commerce...

LebiShop Mall Backend Template Arbitrary File Write Vulnerability

LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The management background of the mall system provides a generate template or generate a single page in the template function, which can generate the...

Mall Shopping Fashion Store - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Mall Shopping Fashion Store published at the 'play' market has multiple vulnerabilities...

BFF Downtown Date: Beauty Mall - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BFF Downtown Date: Beauty Mall published at the 'play' market has multiple vulnerabilities...

Prices in China. Shopping mall - Dangerous filesystem permissions, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Prices in China. Shopping mall published at the 'play' market has multiple vulnerabilities...

Hishop商城分销系统信息泄露漏洞

No description provided by source...

0101SHOP CMS 商城模板存在SQL注入漏洞

CMS在处理浏览器提交的数据时使用filterPara函数过滤，这个函数接着调用了PreventSqlin和Checkxss两个函数进行字符过滤，PreventSqlin用来过滤SQL注入语句，而Checkxss是用来过滤跨站输入。 关键就是在PreventSqlin函数 /inc/AspCmsCommonFun.asp 函数内容如下： Function preventSqlincontent dim sqlStr,sqlArray,i,speStr...

BiWEB最新商城版绕过过滤注入漏洞大礼包

简要描述： BiWEB最新商城版绕过过滤注入漏洞大礼包 详细说明： 在wooyun上看到了有人提了BiWEB商城版的一个XSS漏洞： WooYun: BIWEB商城版XSS盲打cookie ，也有人提了SQL注入，我来找找其他的漏洞吧。去官网下BiWEB商城版最新的5.8.4来看看。 BiWEB对用户输入进行了全局过滤，但是这种过滤方法比较NC，这个漏洞就是来绕过全局过滤的。先来看看这个全局过滤方法吧/config/filtrate.inc.php...

BiWEB最新商城版任意文件上传getshell

简要描述： BiWEB最新商城版任意文件上传getshell 详细说明： 在wooyun上看到了有人提了BiWEB的一个XSS漏洞： WooYun: BIWEB商城版XSS盲打cookie ，也有人提了SQL注入，我来找找其他的漏洞吧。去官网下BiWEB商城版最新的5.8.4来看看。 在用户修改资料时，有一个上传执照图片的点，分析一下这个上传是不是会有任意文件上传的问题呢？ 上传点在这里/user/adminu/licence.php 分析一下上传代码 无关代码 if $SERVER"REQUESTMETHOD" == "POST" //图片上传 if...

用友网络商城命令执行(可getshell)

简要描述： 详细说明： 用友网络商城ThinkPHP2.2命令执行. 1.网络商城地址 http://ec.yonyou.com 2.命令执行 http://ec.yonyou.com/index.php/module/action/param1/$phpinfo phpinfo IP地址 物理路径 漏洞证明：...

逐浪MALL通用某处存储型xss

简要描述： 盗取cookie咯 详细说明： 问题出现在http://mall.zoomla.cn/，也就是 Zoomla!逐浪CMS网店管理系统 在 站内短消息 处内容和主题都没有过滤，导致xss的触发 如图发送xss语句给abc123用户 分别弹框和获取用户cookie 我们换成abc123用户看看 并没有触发，别急，阅读看看 触发了，看看代码 分别两处都没过滤哦 获取到的cookie https://images.seebug.org/upload/201408/0816521512f8e8fa...

IHTML Merchant Mall SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15910/info iHTML Merchant Mall is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...

Multi Vendor Mall (pages.php) SQL Injection Vulnerability

No description provided by source. ============================================================ Multi Vendor Mall pages.php SQL Injection Vulnerability ============================================================ + Multi Vendor Mall pages.php SQL Injection Vulnerability + By NewbieCampuz +...

Joomla Component Media Mall Factory com_mediamall Blind SQLi Vulnerability

No description provided by source. =========================================================================================================== o Joomla Component Media Mall Factory Blind SQLi Vulnerability Software : commediamall version 1.0.4 Vendor : http://www.thefactory.ro/ Author :...

Multi Vendor Mall (itemdetail.php & shop.php) SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------- Multi Vendor Mall itemdetail.php & shop.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author...