CVE-2009-2039: Undefined Security Weakness

Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders...

CVE-2009-2038: Undefined Security Weakness

Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges...

osCommerce 'oscid' Session Fixation Vulnerability

osCommerce is prone to a session-fixation vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

osCommerce 'oscid' Session Fixation Vulnerability

osCommerce is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application. The following are vulnerable: osCommerce 2.2 osCommerce 3.0 Beta Other versions may also be affected. OpenVAS Vulnerabilit...

osCommerce oscid会话固定漏洞

BUGTRAQ ID: 34348 osCommerce是一套基于GNUGPL授权的开源在线购物电子商务解决方案。 当客户端访问OSCommerce网页时，服务器会发送一个cookie，并将该cookie用作所有之后请求的会话cookie。因此，一旦登录成功，所有之后的请求都会用这个cookie来认证用户，这样攻击者就可以劫持会话执行各种非授权操作。 Harald Ponce de Leon OSCommerce 3.0 Beta Harald Ponce de Leon OSCommerce 2.2 厂商补丁： Harald Ponce de Leon...

OSCommerce Session Fixation Vulnerability

There is a flaw in the way OSCommerce handles sessions. When a client visits a OSCommerce web page, the server sends a cookie. That cookie will be the session cookie for every further requests. Thus, once logged in, the cookie will be used to authenticate the user. When logging in without cookies...

OSCommerce Session Fixation

There is a flaw in the way OSCommerce handles sessions. When a client visits a OSCommerce web page, the server sends a cookie. That cookie will be the session cookie for every further requests. Thus, once logged in, the cookie will be used to authenticate the user. When logging in without cookies...

osCommerce 2.23.0 - oscid Session Fixation

osCommerce 2.23.0 - oscid Session Fixation source: https://www.securityfocus.com/bid/34348/info osCommerce is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application. The following are...

osCommerce 2.2/3.0 - 'oscid' Session Fixation

source: https://www.securityfocus.com/bid/34348/info osCommerce is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application. The following are vulnerable: osCommerce 2.2 osCommerce 3.0 Beta Othe...

osCommerce 2.2rc1 Creation / Cross Site Scripting

Module : osCommerce Version : 2.2rc1 Edited by : oscommerce.com/ Download : http://www.oscommerce.com/ Downloadfr : http://www.oscommerce-fr.info/portail/index.php?option=comremository&Itemid=183 Vulnerability : Multiple Vulnerability Author : Jonathan Salwan Mail : submit AT shell-storm.org Web ...

osCommerce unprotected admin directory

The osCommerce admin directory on the remote host server needs to be password protected using .htaccess. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

osCommerce unprotected admin directory

This host is running osCommerce, a widely installed open source shopping e-commerce solution. See http://www.oscommerce.com for more information. The store admin directory on your server needs to be password protected using .htaccess. Most of the time the server you are hosting your store on has...

osCommerce Detection (HTTP)

HTTP based detection of osCommerce. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100001";...

osCommerce Photo Gallery SQL Injection Vulnerability

This host is running Photo Gallery for osCommerce which is prone to SQL Injection vulnerability in galleryprocess.php. OpenVAS Vulnerability Test $Id: oscphotoGallerysqlinjection.nasl 6704 2017-07-12 14:13:36Z cfischer $ osCommerce Photo Gallery SQL-Injection Detection Authors: Michael Meyer...

osCommerce Photo Gallery SQLi Vulnerability

Photo Gallery for osCommerce is prone to an SQL injection SQLi vulnerability in galleryprocess.php. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2009-0408

Cross-site request forgery CSRF vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators...

CVE-2009-0408

osCommerce 2.2 RC 2a is affected by a Cross‑Site Request Forgery (CSRF) vulnerability that can hijack administrator sessions. The provided Connected document (PacketStorm) describes an authentication bypass that allows unauthorized access to admin pages and potential administrative actions, indic...

CVE-2009-0408

Cross-site request forgery CSRF vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators...

CVE-2009-0408: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators...