K&S Shopsysteme Arbitrary Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== K&S Shopsysteme Arbitrary Remote File Upload Vulnerability ========================================================== Script Name: Shopsysteme new version oscommerce Download:...

K&S Shopsysteme Arbitrary Remote File Upload Vulnerability

No description provided by source. Script Name: Shopsysteme new version oscommerce Download: http://www.shopsystem-forum.de/productinfo.php?cPath=22&productsid=43 299 euro : Author: mNt File Upload Bug Google Dork: intext:Powered by K&S Media Concept - Shopsysteme Powered by K&S Media Concept -...

K&S Shopsysteme - Arbitrary File Upload

Script Name: Shopsysteme new version oscommerce Download: http://www.shopsystem-forum.de/productinfo.php?cPath=22&productsid=43 299 euro : Author: mNt File Upload Bug Google Dork: intext:Powered by K&S Media Concept - Shopsysteme Powered by K&S Media Concept - Shopsysteme için yaklaşık 32.900...

Shopsysteme File Upload Vulnerability

Script Name: Shopsysteme new version oscommerce Download: http://www.shopsystem-forum.de/productinfo.php?cPath=22&productsid=43 299 euro : Author: mNt File Upload Bug Google Dork: intext:Powered by K&S Media Concept - Shopsysteme Powered by K&S Media Concept - Shopsysteme için yaklaşık 32.900...

KS Shopsysteme - Arbitrary File Upload

KS Shopsysteme - Arbitrary File Upload Script Name: Shopsysteme new version oscommerce Download: http://www.shopsystem-forum.de/productinfo.php?cPath=22&productsid=43 299 euro : Author: mNt File Upload Bug Google Dork: intext:Powered by K&S Media Concept - Shopsysteme Powered by K&S Media Concept...

CVE-2008-4765

SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results operation. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect...

Sql injection

SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results operation. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect...

CVE-2008-4765

SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results operation. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect...

CVE-2008-4765

CVE-2008-4765 describes a SQL injection vulnerability in the osCommerce Poll Booth Add-On 2.0, specifically in pollBooth.php. The issue allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results operation. The vulnerability stemS from unsafely handling the pol...

CVE-2008-4765: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results operation. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect...

CVE-2008-4170

createaccount.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message...

Design/Logic Flaw

createaccount.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message...

CVE-2008-4170

createaccount.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message...

CVE-2008-4170

The CVE-2008-4170 entry concerns osCommerce 2.2 RC 2a, where the create_account.php handler exposes sensitive information because an invalid dob parameter triggers an error message that reveals the installation path. This is an information-disclosure vulnerability in the input validation/error ha...

CVE-2008-4170: Exposure of Sensitive Information to an Unauthorized Actor

createaccount.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message...

[NOBYTES.COM: #12] osCommerce 2.2rc2a - Information Disclosure

Application: osCommerce 2.2rc2a Authors Site: http://www.oscommerce.com/ +--------------------------------------------------------------+ Information Disclosure: Manipulation of the 'DOB' Variable on createaccount.php can cause information disclosure: In this example the POST variable 'DOB' has...

oscom-disclose.txt

Application: osCommerce 2.2rc2a Authors Site: http://www.oscommerce.com/ +--------------------------------------------------------------+ Information Disclosure: Manipulation of the 'DOB' Variable on createaccount.php can cause information disclosure: In this example the POST variable 'DOB' has...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. osCommerce: crossite scripting...

Cross-Site Scripting vulnerability in osCommerce

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting persistent уязвимости в системе osCommerce. XSS: POST запрос на странице http://site/shoppingcart.php scriptalertdocument.cookie/script В поле Количество. После инъекции кода, он срабатывает на каждой странице сайта persistent...

osCommerce 2.12.2 - Multiple Cross-Site Scripting Vulnerabilities

osCommerce 2.12.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29055/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...