osCommerce 2.2-MS2 phpinfo() Disclosure

Exploit Title: osCommerce 2.2-MS2 phpinfo disclosure vulnerability Date: 21 June 2010 Author: Neo-Gabriel Download: http://www.oscommerce.com/solutions/downloads Version: 2.2-MS2 Tested on: Windows 95 . .. . . . | | | /|| / \ / \ | | | | | | / / | | / | | |/ \ \ / \ \ / /\ | | | | \ \ | | \ \ |/...

osCommerceXSS.txt

Hello All, I have discovered XSS vulnerability in: osCommerce 2.2-MS2 Authors Site: http://www.oscommerce.com/ +-Example:--------------------------------------------------+ XSS: http://www.victimsite.com/contactus.php?&name=1&email=1&enquiry=%3C/textare a%3E%3Cscript%3Ealert'w00t';%3C/script%3E...

CVE-2005-0458: Undefined Security Weakness

Cross-site scripting XSS vulnerability in contactus.php in osCommerce 2.2-MS2 allows remote attackers to inject arbitrary web script or HTML via the enquiry parameter...

[NOBYTES.COM: #3] osCommerce 2.2-MS2 - XSS Vulnerability

Hello All, I have discovered XSS vulnerability in: osCommerce 2.2-MS2 Authors Site: http://www.oscommerce.com/ +-Example:--------------------------------------------------+ XSS: http://www.victimsite.com/contactus.php?&name=1&email=1&enquiry=3C/textare a3E3Cscript3Ealert'w00t';3C/script3E Result:...