2175 matches found
iBoutique.MALL - Directory Traversal
iBoutique.MALL Homepage: http://www.netartmedia.net/mall/ Description: Based on iBoutique 4.0, iBoutique.MALL is a powerful multi user mall software solution. It makes possible for the new vendors to signup and create their own customized online stores with ease. Effected files: index.php Directo...
CVE-2005-4330
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the 1 id, 2 store, and 3 step parameters...
CVE-2005-4330
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the 1 id, 2 store, and 3 step parameters...
CVE-2005-4330
CVE-2005-4330: SQL injection in iHTML Merchant Mall’s browse.ihtml allows remote attackers to execute arbitrary SQL via the (1) id, (2) store, and (3) step parameters. Affected software: iHTML Merchant Mall (browse.ihtml). Root cause: unsafely constructed SQL queries with user-supplied parameters...
iHTML Merchant Mall SQL inj.
iHTML Merchant Mall SQL inj. Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ihtml-merchant-mall-sql-inj.html vendor:http://www.ihtmlmerchant.com/featuresmall.htm affected version: latest Product Description: The iHTML Merchant Mall is specificall...
CVE-2005-4330: Undefined Security Weakness
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the 1 id, 2 store, and 3 step parameters...
IHTML Merchant Mall - SQL Injection
source: https://www.securityfocus.com/bid/15910/info iHTML Merchant Mall is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...
CVE-2004-2275
The CVE-2004-2275 entry concerns i-mall.cgi in I-Mall Commerce, where remote command execution is possible via shell metacharacters in the p parameter. The vulnerability stems from insufficient input sanitization in i-mall.cgi, enabling an attacker to pass arbitrary shell commands to the remote s...
CVE-2004-2275
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter...
CVE-2004-2275: Undefined Security Weakness
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter...
I-Mall Commerce - 'i-mall.cgi' Remote Command Execution
I-Mall explo Spawn bash style Shell with webserver uid Greetz z, spax, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $shiz; my @results; my $probe; my @U; $U1 = "/i-mall/i-mall.cgi?p=|"; sub intro sleep 1; ; sub...
I-Mall Commerce - i-mall.cgi Remote Command Execution
I-Mall Commerce - i-mall.cgi Remote Command Execution I-Mall explo Spawn bash style Shell with webserver uid Greetz z, spax, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $shiz; my @results; my $probe; my @U; $U1...
I-Mall Commerce (i-mall.cgi) Remote Command Execution Exploit
No description provided by source. I-Mall explo Spawn bash style Shell with webserver uid Greetz z, spax, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $shiz; my @results; my $probe; my @U; $U1 =...
I-Mall Commerce (i-mall.cgi) Remote Command Execution Exploit
Exploit for cgi platform in category web applications ============================================================= I-Mall Commerce i-mall.cgi Remote Command Execution Exploit ============================================================= I-Mall explo Spawn bash style Shell with webserver uid Gree...