osCommerce 2.2 - '/admin/orders_status.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...

osCommerce 2.2 - '/admin/tax_rates.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...

osCommerce 2.2 - '/admin/zones.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...

oscommerce22-php.txt

php poc exploit for osCommerce = 2.2 Milestone 2 060817 vuln found by gulftech it does not work with magicquotesgpc on so make it off to test this script. you're lucky if you can find server with this settings set to off. this is for education use only. topic: sql injection. kiddies use it at you...

osCommerce 2.12.2 - product_info.php SQL Injection

osCommerce 2.12.2 - productinfo.php SQL Injection source: https://www.securityfocus.com/bid/19774/info osCommerce is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...

osCommerce 2.1/2.2 - 'product_info.php' SQL Injection

source: https://www.securityfocus.com/bid/19774/info osCommerce is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...

CVE-2006-4298

Multiple directory traversal vulnerabilities in cache.php in osCommerce before 2.2 Milestone 2 060817 allow remote attackers to determine existence of arbitrary files and disclose the installation path via a .. dot dot in unspecified parameters in the 1 tepcachealsopurchased, 2...

CVE-2006-4297

SQL injection vulnerability in shoppingcart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to execute arbitrary SQL commands via id array parameters...

CVE-2006-4297

SQL injection vulnerability in shoppingcart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to execute arbitrary SQL commands via id array parameters...

CVE-2006-4298

osCommerce prior to 2.2 Milestone 2 (060817) contains multiple directory traversal flaws in cache.php, enabling remote attackers to reveal existence of arbitrary files and the installation path via .. in the parameters for tep_cache_also_purchased, tep_cache_manufacturers_box, and tep_cache_categ...

CVE-2006-4297

CVE-2006-4297 is anSQL injection in osCommerce's shopping_cart.php (before 2.2 Milestone 2 060817). The vulnerability allows remote attackers to execute arbitrary SQL via id array parameters. AV:N/AC:L/Au:N/C:P/I:P/A:P (CVSSv2 base 7.5) per NVD; impact is partial on confidentiality, integrity, an...

CVE-2006-4298

Multiple directory traversal vulnerabilities in cache.php in osCommerce before 2.2 Milestone 2 060817 allow remote attackers to determine existence of arbitrary files and disclose the installation path via a .. dot dot in unspecified parameters in the 1 tepcachealsopurchased, 2...

osCommerce shopping_cart.php id Array Parameters SQL Injection

The version of osCommerce installed on the remote host fails to properly sanitize input used for product attributes before using it in a database query in the 'shoppingcart.php' script. Provided PHP's 'magicquotesgpc' setting is disabled, an unauthenticated attacker may be able to exploit this...

update Protection against osCommerce SQL Injection Vulnerability

A vulnerability has been identified in osCommerce, an online shopping cart application. The vulnerability can be exploited by attackers to manipulate SQL queries...

osCommerce "extras/" information/source code disclosure

---- osCommerce = 2.2 "extras/" information/source code disclosure ------------ software site: http://www.oscommerce.com/ if extras/ folder is placed inside the www path, you can see all files on target system, including php source code with database details, poc:...

osCommerce <= 2.2 (extras) Source Code Disclosure Vulnerability

Exploit for unknown platform in category web applications =============================================================== osCommerce \n"; print nl2brhtmlentitiesimplode$readme, ' '; print "Continue\n"; print "\n"; exit; ... google search: in...

osCommerce &lt;= 2.2 (extras) Source Code Disclosure Vulnerability

No description provided by source. ---- osCommerce = 2.2 "extras/" information/source code disclosure ------------ software site: http://www.oscommerce.com/ if extras/ folder is placed inside the www path, you can see all files on target system, including php source code with database details, po...

osCommerce 2.2 - extras Source Code Disclosure

osCommerce 2.2 - extras Source Code Disclosure ---- osCommerce \n"; print nl2brhtmlentitiesimplode$readme, ' '; print "Continue\n"; print "\n"; exit; ... google search: inurl:"extras/update.php" intext:mysql.php -display...

osCommerce 2.2 - 'extras' Source Code Disclosure

---- osCommerce \n"; print nl2brhtmlentitiesimplode$readme, ' '; print "Continue\n"; print "\n"; exit; ... google search: inurl:"extras/update.php" intext:mysql.php -display -------------------------------------------------------------------------------- rgod site: http://retrogod.altervista.org...

CVE-2005-4677

The CVE-2005-4677 entry describes a SQL injection vulnerability in the osCommerce Additional Images module (additional_images.php) before version 1.14. The flaw allows remote attackers to inject arbitrary SQL via the products_id parameter to product_info.php, enabling potentially unauthorized dat...