osCommerce file_manager.php Arbitrary PHP Code Injection (intrusive check)

The version of osCommerce hosted on the remote web server allows a remote attacker to access the Admin filemanager utility without authentication. Further, this utility appears to allow arbitrary PHP code to be stored in files under the web server's document directory and then executed subject to...

osCommerce Detection

The remote host is hosting osCommerce, an open source e-commerce application written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42349; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

osCommerce Online Merchant 2.2 RC2a Code Execution

"; $message="POST ".$path.$adminpath."filemanager.php/login.php?action=save HTTP/1.1\r\n"; $message.="Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, /\r\n"; $message.="Accept-Language: zh-cn\r\n"; $message.="Content-Type:...

osCommerce Online Merchant 2.2 RC2a - Code Execution

"; $message="POST ".$path.$adminpath."filemanager.php/login.php?action=save HTTP/1.1\r\n"; $message.="Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, /\r\n"; $message.="Accept-Language: zh-cn\r\n"; $message.="Content-Type:...

osCommerce Online Merchant 2.2 RC2a Code Execution Exploit

No description provided by source. ?php printr' +---------------------------------------------------------------------------+ osCommerce Online Merchant 2.2 RC2a RCE Exploit by Flyh4t mail: [email protected] team: http://www.wolvez.org dork: Powered by osCommerce Gr44tz to q1ur3n...

osCommerce Online Merchant 2.2 RC2a Code Execution Exploit

Exploit for unknown platform in category web applications ========================================================== osCommerce Online Merchant 2.2 RC2a Code Execution Exploit ========================================================== "; $message="POST...

osCommerce Online Merchant 2.2 RC2a - Code Execution

osCommerce Online Merchant 2.2 RC2a - Code Execution "; $message="POST ".$path.$adminpath."filemanager.php/login.php?action=save HTTP/1.1\r\n"; $message.="Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, /\r\n"; $message.="Accept-Language: zh-cn\r\n";...

Design/Logic Flaw

Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders...

CVE-2009-2038

Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges...

CVE-2009-2039

Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders...

Design/Logic Flaw

Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges...

CVE-2009-2038

Technical details for CVE-2009-2038 are not publicly provided in the supplied documents. The available sources confirm an unspecified vulnerability in the Finnish Bank Payment module for osCommerce but do not disclose affected versions, impact, or remediation.

CVE-2009-2038

Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges...

CVE-2009-2039

Technical details for CVE-2009-2039 are not provided in the supplied documents. Monitor for updates.

CVE-2009-2039

Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders...

osCommerce 'oscid' Session Fixation Vulnerability

osCommerce is prone to a session-fixation vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

osCommerce 'oscid' Session Fixation Vulnerability

osCommerce is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application. The following are vulnerable: osCommerce 2.2 osCommerce 3.0 Beta Other versions may also be affected. OpenVAS Vulnerabilit...

osCommerce oscid会话固定漏洞

BUGTRAQ ID: 34348 osCommerce是一套基于GNUGPL授权的开源在线购物电子商务解决方案。 当客户端访问OSCommerce网页时，服务器会发送一个cookie，并将该cookie用作所有之后请求的会话cookie。因此，一旦登录成功，所有之后的请求都会用这个cookie来认证用户，这样攻击者就可以劫持会话执行各种非授权操作。 Harald Ponce de Leon OSCommerce 3.0 Beta Harald Ponce de Leon OSCommerce 2.2 厂商补丁： Harald Ponce de Leon...

OSCommerce Session Fixation Vulnerability

There is a flaw in the way OSCommerce handles sessions. When a client visits a OSCommerce web page, the server sends a cookie. That cookie will be the session cookie for every further requests. Thus, once logged in, the cookie will be used to authenticate the user. When logging in without cookies...

OSCommerce Session Fixation

There is a flaw in the way OSCommerce handles sessions. When a client visits a OSCommerce web page, the server sends a cookie. That cookie will be the session cookie for every further requests. Thus, once logged in, the cookie will be used to authenticate the user. When logging in without cookies...