2359 matches found
CVE-2006-2669
Multiple cross-site scripting XSS vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter in search.php the "search box", 2 the prodid parameter in detail.php, and the 3 cid parameter in products.php...
CVE-2006-2669
Multiple cross-site scripting XSS vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter in search.php the "search box", 2 the prodid parameter in detail.php, and the 3 cid parameter in products.php...
CVE-2006-2669
The CVE-2006-2669 entry describes multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0, exploitable via (1) search.php (search box), (2) detail.php (prodid parameter), and (3) products.php (cid parameter). The NVD notes impact as partial integrity impact with medium severi...
CVE-2006-2669: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter in search.php the "search box", 2 the prodid parameter in detail.php, and the 3 cid parameter in products.php...
iBoutique.MALL - Directory Traversal
iBoutique.MALL Homepage: http://www.netartmedia.net/mall/ Description: Based on iBoutique 4.0, iBoutique.MALL is a powerful multi user mall software solution. It makes possible for the new vendors to signup and create their own customized online stores with ease. Effected files: index.php Directo...
CVE-2005-4330
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the 1 id, 2 store, and 3 step parameters...
CVE-2005-4330
CVE-2005-4330: SQL injection in iHTML Merchant Mall’s browse.ihtml allows remote attackers to execute arbitrary SQL via the (1) id, (2) store, and (3) step parameters. Affected software: iHTML Merchant Mall (browse.ihtml). Root cause: unsafely constructed SQL queries with user-supplied parameters...
CVE-2005-4330
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the 1 id, 2 store, and 3 step parameters...
CVE-2005-4330: Undefined Security Weakness
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the 1 id, 2 store, and 3 step parameters...
iHTML Merchant Mall SQL inj.
iHTML Merchant Mall SQL inj. Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ihtml-merchant-mall-sql-inj.html vendor:http://www.ihtmlmerchant.com/featuresmall.htm affected version: latest Product Description: The iHTML Merchant Mall is specificall...
IHTML Merchant Mall - SQL Injection
source: https://www.securityfocus.com/bid/15910/info iHTML Merchant Mall is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...
CVE-2004-2275
The CVE-2004-2275 entry concerns i-mall.cgi in I-Mall Commerce, where remote command execution is possible via shell metacharacters in the p parameter. The vulnerability stems from insufficient input sanitization in i-mall.cgi, enabling an attacker to pass arbitrary shell commands to the remote s...
CVE-2004-2275
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter...
CVE-2004-2275: Undefined Security Weakness
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter...
I-Mall Commerce (i-mall.cgi) Remote Command Execution Exploit
Exploit for cgi platform in category web applications ============================================================= I-Mall Commerce i-mall.cgi Remote Command Execution Exploit ============================================================= I-Mall explo Spawn bash style Shell with webserver uid Gree...
I-Mall Commerce (i-mall.cgi) Remote Command Execution Exploit
No description provided by source. I-Mall explo Spawn bash style Shell with webserver uid Greetz z, spax, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $shiz; my @results; my $probe; my @U; $U1 =...
I-Mall Commerce - 'i-mall.cgi' Remote Command Execution
I-Mall explo Spawn bash style Shell with webserver uid Greetz z, spax, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $shiz; my @results; my $probe; my @U; $U1 = "/i-mall/i-mall.cgi?p=|"; sub intro sleep 1; ; sub...
I-Mall Commerce - i-mall.cgi Remote Command Execution
I-Mall Commerce - i-mall.cgi Remote Command Execution I-Mall explo Spawn bash style Shell with webserver uid Greetz z, spax, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $shiz; my @results; my $probe; my @U; $U1...