23 matches found
EUVD-2004-0301
Malware in sbrugna...
EUVD-2004-0300
Malware in sbrugna...
Mac OS X < 10.11 Multiple Vulnerabilities
Binary data 8982.prm...
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11 OS X El Capitan 10.11 is now available and addresses the following: Address Book Available for: Mac OS X v10.6.8 and later Impact: A local attacker may be able to inject arbitrary code to processes loading the Address Book framework Description: An issu...
Ecommerce Corporation Online Store Kit 3.0 More.PHP XSS
No description provided by source. source: http://www.securityfocus.com/bid/9676/info Multiple vulnerabilities have been identified in the software due to improper sanitization of user-supplied input. Successful exploitation of these issues could allow an attacker to carry out cross-site scriptin...
Ecommerce Corporation Online Store Kit 3.0 shop.php cat Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of user-supplied input via the URI. As a result of this a maliciou...
Ecommerce Corporation Online Store Kit 3.0 shop_by_brand.php cat_manufacturer Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of user-supplied input via the URI. As a result of this a maliciou...
Ecommerce Corporation Online Store Kit 3.0 More.PHP id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/9676/info Multiple vulnerabilities have been identified in the software due to improper sanitization of user-supplied input. Successful exploitation of these issues could allow an attacker to carry out cross-site scriptin...
CVE-2004-0301
Cross-site scripting XSS vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter...
CVE-2004-0300
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via 1 the cat parameter in shop.php, 2 the id parameter in more.php, 3 the catmanufacturer parameter in shopbybrand.php, or 4 the id parameter in listing.php...
CVE-2004-0301
CVE-2004-0301 is an XSS vulnerability in Online Store Kit 3.0, specifically in more.php via the id parameter. The root cause is insufficient input sanitization of the id value, allowing remote attackers to inject arbitrary HTML. Impact is described as partial confidentiality, integrity, and avail...
CVE-2004-0300
The CVE-2004-0300 entry concerns Ecommerce Corporation Online Store Kit 3.0. The vulnerability is a SQL injection in multiple parameters: cat in shop.php, id in more.php, cat_manufacturer in shop_by_brand.php, and id in listing.php. This allows remote attackers to inject arbitrary SQL and gain un...
CVE-2004-0300
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via 1 the cat parameter in shop.php, 2 the id parameter in more.php, 3 the catmanufacturer parameter in shopbybrand.php, or 4 the id parameter in listing.php...
CVE-2004-0301
Cross-site scripting XSS vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter...
eCommerce Corporation Online Store Kit 3.0 - shop_by_brand.php?cat_manufacturer SQL Injection
eCommerce Corporation Online Store Kit 3.0 - shopbybrand.php?catmanufacturer SQL Injection source: https://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of...
ZH2004-07SA.txt
ZH2004-07SA security advisory: Multiple Sql injection vulnerabilities in Online Store Kit 3.0 Products Lite - Standard and Pro Published: 17 february 2004 Released: 17 february 2004 Name: Online Store Kit Products Lite - Standard - Pro Affected Systems: 3.0 Issue: Sql Injection Vulnerability...
ZH2004-07SA (security advisory): Multiple Sql injection vulnerabilities in Online Store Kit 3.0 Products (Lite - Standard and Pro)
ZH2004-07SA security advisory: Multiple Sql injection vulnerabilities in Online Store Kit 3.0 Products Lite - Standard and Pro Published: 17 february 2004 Released: 17 february 2004 Name: Online Store Kit Products Lite - Standard - Pro Affected Systems: 3.0 Issue: Sql Injection Vulnerability...
eCommerce Corporation Online Store Kit 3.0 - 'shop_by_brand.php?cat_manufacturer' SQL Injection
source: https://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of user-supplied input via the URI. As a result of this a malicious user may influence database...
[UNIX] Online Store Kit SQL Injection Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
eCommerce Corporation Online Store Kit 3.0 - More.php Cross-Site Scripting
eCommerce Corporation Online Store Kit 3.0 - More.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9676/info Multiple vulnerabilities have been identified in the software due to improper sanitization of user-supplied input. Successful exploitation of these issues could allow an...