Pre Shopping Mall 1.0 - SQL Injection

============================================== Pre Shopping Mall v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Exploit:...

Pre Shopping Mall 1.0 - SQL Injection

Pre Shopping Mall 1.0 - SQL Injection ============================================== Pre Shopping Mall v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Exploit:...

CVE-2006-7170

Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the 1 t, 2 productId, 3 sk, 4 x, or 5 so parameter to a productreview.php; or the 6 orderNo parameter to b order-track.php...

CVE-2006-7171

productreview.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request with an empty value of the x parameter...

CVE-2006-7170

CVE-2006-7170 describes multiple SQL injection vulnerabilities in Koan Software Mega Mall. The affected components are the PHP scripts (a) product_review.php via parameters t, productId, sk, x, or so, and (b) order-track.php via parameter orderNo. The root cause is unsafely concatenated SQL in th...

CVE-2006-7170

Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the 1 t, 2 productId, 3 sk, 4 x, or 5 so parameter to a productreview.php; or the 6 orderNo parameter to b order-track.php...

CVE-2006-7171

CVE-2006-7171 affects Koan Software Mega Mall. The vulnerability occurs in product_review.php, where remote attackers can cause disclosure of the installation path by sending a request with an empty value for the x[] parameter. The provided documents do not specify affected versions, root cause d...

CVE-2006-7171

productreview.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request with an empty value of the x parameter...

CVE-2006-7171: Improper Input Validation

productreview.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request with an empty value of the x parameter...

CVE-2006-7170: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the 1 t, 2 productId, 3 sk, 4 x, or 5 so parameter to a productreview.php; or the 6 orderNo parameter to b order-track.php...

Mega Mall [ multiples injection sql & full path disclosure ]

vendor site: http://products.kaonsoftwares.com/ product: mega-mall bug:injection sql & full path disclosure language: asp risk: high injection sql get: http://site.com/mega-mall/productreview.php?t=sql http://site.com/mega-mall/productreview.php?t=0&productId=sql...

Mega Mall - order-track.php?orderNo SQL Injection

Mega Mall - order-track.php?orderNo SQL Injection source: https://www.securityfocus.com/bid/21072/info Megamail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Mega Mall - 'order-track.php?orderNo' SQL Injection

source: https://www.securityfocus.com/bid/21072/info Megamail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

megamallSQL.txt

vendor site: http://products.kaonsoftwares.com/ product: mega-mall bug:injection sql & full path disclosure language: asp risk: high injection sql get: http://site.com/mega-mall/productreview.php?t=sql http://site.com/mega-mall/productreview.php?t=0&productId=sql...

Mega Mall - 'product_review.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21072/info Megamail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Pass to eat all the Mall-vulnerability warning-the black bar safety net

Tutorial content: Today to teach you a pass to kill the Mall method! of! Is actually change the idea of it!!!! Very simple!! To prepare a site Hunter. Pony. The Malaysian one!! We first go to open site Hunter! Search below this paragraph!! Keywords: To buy-cart-go to the cashier-confirm consignee...

CVE-2006-2669

Multiple cross-site scripting XSS vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter in search.php the "search box", 2 the prodid parameter in detail.php, and the 3 cid parameter in products.php...

CVE-2006-2669

The CVE-2006-2669 entry describes multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0, exploitable via (1) search.php (search box), (2) detail.php (prodid parameter), and (3) products.php (cid parameter). The NVD notes impact as partial integrity impact with medium severi...

CVE-2006-2669

Multiple cross-site scripting XSS vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter in search.php the "search box", 2 the prodid parameter in detail.php, and the 3 cid parameter in products.php...

CVE-2006-2669: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter in search.php the "search box", 2 the prodid parameter in detail.php, and the 3 cid parameter in products.php...