osCommerce 2.1/2.2 - 'product_info.php' SQL Injection

source: https://www.securityfocus.com/bid/19774/info osCommerce is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...

CVE-2006-4298

Multiple directory traversal vulnerabilities in cache.php in osCommerce before 2.2 Milestone 2 060817 allow remote attackers to determine existence of arbitrary files and disclose the installation path via a .. dot dot in unspecified parameters in the 1 tepcachealsopurchased, 2...

CVE-2006-4297

SQL injection vulnerability in shoppingcart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to execute arbitrary SQL commands via id array parameters...

CVE-2006-4297

SQL injection vulnerability in shoppingcart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to execute arbitrary SQL commands via id array parameters...

CVE-2006-4298

osCommerce prior to 2.2 Milestone 2 (060817) contains multiple directory traversal flaws in cache.php, enabling remote attackers to reveal existence of arbitrary files and the installation path via .. in the parameters for tep_cache_also_purchased, tep_cache_manufacturers_box, and tep_cache_categ...

CVE-2006-4298

Multiple directory traversal vulnerabilities in cache.php in osCommerce before 2.2 Milestone 2 060817 allow remote attackers to determine existence of arbitrary files and disclose the installation path via a .. dot dot in unspecified parameters in the 1 tepcachealsopurchased, 2...

CVE-2006-4297

CVE-2006-4297 is anSQL injection in osCommerce's shopping_cart.php (before 2.2 Milestone 2 060817). The vulnerability allows remote attackers to execute arbitrary SQL via id array parameters. AV:N/AC:L/Au:N/C:P/I:P/A:P (CVSSv2 base 7.5) per NVD; impact is partial on confidentiality, integrity, an...

CVE-2006-4298: Undefined Security Weakness

Multiple directory traversal vulnerabilities in cache.php in osCommerce before 2.2 Milestone 2 060817 allow remote attackers to determine existence of arbitrary files and disclose the installation path via a .. dot dot in unspecified parameters in the 1 tepcachealsopurchased, 2...

osCommerce shopping_cart.php id Array Parameters SQL Injection

The version of osCommerce installed on the remote host fails to properly sanitize input used for product attributes before using it in a database query in the 'shoppingcart.php' script. Provided PHP's 'magicquotesgpc' setting is disabled, an unauthenticated attacker may be able to exploit this...

CVE-2006-4297: Undefined Security Weakness

SQL injection vulnerability in shoppingcart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to execute arbitrary SQL commands via id array parameters...

update Protection against osCommerce SQL Injection Vulnerability

A vulnerability has been identified in osCommerce, an online shopping cart application. The vulnerability can be exploited by attackers to manipulate SQL queries...

osCommerce "extras/" information/source code disclosure

---- osCommerce = 2.2 "extras/" information/source code disclosure ------------ software site: http://www.oscommerce.com/ if extras/ folder is placed inside the www path, you can see all files on target system, including php source code with database details, poc:...

osCommerce 2.2 - extras Source Code Disclosure

osCommerce 2.2 - extras Source Code Disclosure ---- osCommerce \n"; print nl2brhtmlentitiesimplode$readme, ' '; print "Continue\n"; print "\n"; exit; ... google search: inurl:"extras/update.php" intext:mysql.php -display...

osCommerce <= 2.2 (extras) Source Code Disclosure Vulnerability

No description provided by source. ---- osCommerce = 2.2 "extras/" information/source code disclosure ------------ software site: http://www.oscommerce.com/ if extras/ folder is placed inside the www path, you can see all files on target system, including php source code with database details, po...

osCommerce <= 2.2 (extras) Source Code Disclosure Vulnerability

Exploit for unknown platform in category web applications =============================================================== osCommerce \n"; print nl2brhtmlentitiesimplode$readme, ' '; print "Continue\n"; print "\n"; exit; ... google search: in...

osCommerce 2.2 - 'extras' Source Code Disclosure

---- osCommerce \n"; print nl2brhtmlentitiesimplode$readme, ' '; print "Continue\n"; print "\n"; exit; ... google search: inurl:"extras/update.php" intext:mysql.php -display -------------------------------------------------------------------------------- rgod site: http://retrogod.altervista.org...

CVE-2005-4677

The CVE-2005-4677 entry describes a SQL injection vulnerability in the osCommerce Additional Images module (additional_images.php) before version 1.14. The flaw allows remote attackers to inject arbitrary SQL via the products_id parameter to product_info.php, enabling potentially unauthorized dat...

CVE-2005-4677

SQL injection vulnerability in additionalimages.php aka the Additional Images module before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the productsid parameter to productinfo.php...

CVE-2005-4677: Undefined Security Weakness

SQL injection vulnerability in additionalimages.php aka the Additional Images module before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the productsid parameter to productinfo.php...

Hardcoded credentials

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...