CVE-2009-4120

Multiple cross-site request forgery CSRF vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete orders via an orders-delete action to admin.php, and possibly 2 delete products or 3 delete pages via unspecified vectors...

CVE-2009-4121

Multiple cross-site request forgery CSRF vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete web pages via a p-delete action to admin.php, and possibly 2 delete products or 3 delete orders via...

CVE-2009-4121

Multiple cross-site request forgery CSRF vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete web pages via a p-delete action to admin.php, and possibly 2 delete products or 3 delete orders via...

CVE-2009-4120

Multiple cross-site request forgery CSRF vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete orders via an orders-delete action to admin.php, and possibly 2 delete products or 3 delete pages via unspecified vectors...

MMORPG Zone SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

Design/Logic Flaw

Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders...

CVE-2009-2039

Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders...

XSS and Data Manipulation attacks found in CMS PHPCart.

. . | / | | | / / | |/ // / / / |/ / // | / | | / / / // / |/| || /| / / / / / / / / | | / / / | // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE -r45c4l -Bond Author: h4x0r Home :...

neotericuk-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE -r45c4l -Bond...

Sql injection

SQL injection vulnerability in the nBill comnetinvoice component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in an orders action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-3498

SQL injection vulnerability in the nBill comnetinvoice component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in an orders action to index.php. NOTE: some of these details are obtained from third party information...

ashop-sql.txt

usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; use URI::Escape; -------------------------------------------------------------------------------------------------------------------------------------------------------- x AShop Deluxe 4.x Remote SQL inJection Exploit x Ditemuk...

AShop Deluxe 4.x (catalogue.php cat) Remote SQL Injection Exploit

No description provided by source. usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; use URI::Escape; -------------------------------------------------------------------------------------------------------------------------------------------------------- x AShop Deluxe 4.x...

AShop Deluxe 4.x (catalogue.php cat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= AShop Deluxe 4.x catalogue.php cat Remote SQL Injection Exploit ================================================================= usr/bin/perl use LWP::UserAgent; use...

AShop Deluxe 4.x - catalogue.php SQL Injection

AShop Deluxe 4.x - catalogue.php SQL Injection usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; use URI::Escape; -------------------------------------------------------------------------------------------------------------------------------------------------------- x AShop...

Application orders Linux in WebAPP v0.9.9.2.1

By b0rizQ Dork : inurl:"apage/apage.cgi OR powered by WebAPP v0.9.9.2.1 File : apage.cgi Exploits : http://www.exemple.com/cgi-bin/mods/apage/apage.cgi?f=training.htm.|pwd|...

CVE-2006-4969

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

Pie Cart Pro - 'Inc_Dir' Remote File Inclusion

==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA http://www.doodlebabies.com/...

Pie Cart Pro (Inc_Dir) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Pie Cart Pro IncDir Remote File Include Vulnerabilities ==========================================================...

Pie Cart Pro (Inc_Dir) Remote File Include Vulnerabilities

No description provided by source. ==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA http://www.doodlebabies.com/...