828 matches found
osCommerce 2.23.0 - oscid Session Fixation
osCommerce 2.23.0 - oscid Session Fixation source: https://www.securityfocus.com/bid/34348/info osCommerce is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application. The following are...
osCommerce 2.2/3.0 - 'oscid' Session Fixation
source: https://www.securityfocus.com/bid/34348/info osCommerce is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application. The following are vulnerable: osCommerce 2.2 osCommerce 3.0 Beta Othe...
osCommerce 2.2rc1 Creation / Cross Site Scripting
Module : osCommerce Version : 2.2rc1 Edited by : oscommerce.com/ Download : http://www.oscommerce.com/ Downloadfr : http://www.oscommerce-fr.info/portail/index.php?option=comremository&Itemid=183 Vulnerability : Multiple Vulnerability Author : Jonathan Salwan Mail : submit AT shell-storm.org Web ...
osCommerce unprotected admin directory
The osCommerce admin directory on the remote host server needs to be password protected using .htaccess. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
osCommerce unprotected admin directory
This host is running osCommerce, a widely installed open source shopping e-commerce solution. See http://www.oscommerce.com for more information. The store admin directory on your server needs to be password protected using .htaccess. Most of the time the server you are hosting your store on has...
osCommerce Detection (HTTP)
HTTP based detection of osCommerce. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100001";...
osCommerce Photo Gallery SQL Injection Vulnerability
This host is running Photo Gallery for osCommerce which is prone to SQL Injection vulnerability in galleryprocess.php. OpenVAS Vulnerability Test $Id: oscphotoGallerysqlinjection.nasl 6704 2017-07-12 14:13:36Z cfischer $ osCommerce Photo Gallery SQL-Injection Detection Authors: Michael Meyer...
osCommerce Photo Gallery SQLi Vulnerability
Photo Gallery for osCommerce is prone to an SQL injection SQLi vulnerability in galleryprocess.php. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2009-0408
Cross-site request forgery CSRF vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators...
CVE-2009-0408
osCommerce 2.2 RC 2a is affected by a Cross‑Site Request Forgery (CSRF) vulnerability that can hijack administrator sessions. The provided Connected document (PacketStorm) describes an authentication bypass that allows unauthorized access to admin pages and potential administrative actions, indic...
CVE-2009-0408
Cross-site request forgery CSRF vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators...
K&S Shopsysteme Arbitrary Remote File Upload Vulnerability
No description provided by source. Script Name: Shopsysteme new version oscommerce Download: http://www.shopsystem-forum.de/productinfo.php?cPath=22&productsid=43 299 euro : Author: mNt File Upload Bug Google Dork: intext:Powered by K&S Media Concept - Shopsysteme Powered by K&S Media Concept -...
K&S Shopsysteme Arbitrary Remote File Upload Vulnerability
Exploit for unknown platform in category web applications ========================================================== K&S Shopsysteme Arbitrary Remote File Upload Vulnerability ========================================================== Script Name: Shopsysteme new version oscommerce Download:...
K&S Shopsysteme - Arbitrary File Upload
Script Name: Shopsysteme new version oscommerce Download: http://www.shopsystem-forum.de/productinfo.php?cPath=22&productsid=43 299 euro : Author: mNt File Upload Bug Google Dork: intext:Powered by K&S Media Concept - Shopsysteme Powered by K&S Media Concept - Shopsysteme için yaklaşık 32.900...
Shopsysteme File Upload Vulnerability
Script Name: Shopsysteme new version oscommerce Download: http://www.shopsystem-forum.de/productinfo.php?cPath=22&productsid=43 299 euro : Author: mNt File Upload Bug Google Dork: intext:Powered by K&S Media Concept - Shopsysteme Powered by K&S Media Concept - Shopsysteme için yaklaşık 32.900...
KS Shopsysteme - Arbitrary File Upload
KS Shopsysteme - Arbitrary File Upload Script Name: Shopsysteme new version oscommerce Download: http://www.shopsystem-forum.de/productinfo.php?cPath=22&productsid=43 299 euro : Author: mNt File Upload Bug Google Dork: intext:Powered by K&S Media Concept - Shopsysteme Powered by K&S Media Concept...
CVE-2008-4765
SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results operation. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect...
Sql injection
SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results operation. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect...
CVE-2008-4765
CVE-2008-4765 describes a SQL injection vulnerability in the osCommerce Poll Booth Add-On 2.0, specifically in pollBooth.php. The issue allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results operation. The vulnerability stemS from unsafely handling the pol...