osCommerce 2.2 - manufacturers_id Cross-Site Scripting

osCommerce 2.2 - manufacturersid Cross-Site Scripting source: https://www.securityfocus.com/bid/9277/info A vulnerability has been reported to exist in the software that may allow a remote user to launch cross-site scripting attacks. The problem is reported to exist due to improper sanitizing of...

osCommerce 2.2 - products_id SQL Injection

osCommerce 2.2 - productsid SQL Injection source: https://www.securityfocus.com/bid/9275/info It has been reported that one of the scripts included with osCommerce fails to validate user-supplied input, rendering it vulnerable to a SQL injection attack. It has been reported that an attacker may...

osCommerce < 2.2-MS2 - Multiple Vulnerabilities

Source: http://gulftech.org/advisories/osCommerce%20Multiple%20Vulnerabilities/19 osCommerce Multiple Vulnerabilities Vendor: osCommerce Product: osCommerce Version: = 2.2-MS2 Website: http://www.oscommerce.com BID: 9275 9277 Description: osCommerce is an online shop e-commerce solution under on...

osCommerce 2.2 - 'manufacturers_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9277/info A vulnerability has been reported to exist in the software that may allow a remote user to launch cross-site scripting attacks. The problem is reported to exist due to improper sanitizing of user-supplied data in certain URI parameters passed to...

osCommerce 2.2-MS2 - Multiple Vulnerabilities

osCommerce 2.2-MS2 - Multiple Vulnerabilities Source: http://gulftech.org/advisories/osCommerce%20Multiple%20Vulnerabilities/19 osCommerce Multiple Vulnerabilities Vendor: osCommerce Product: osCommerce Version: = 2.2-MS2 Website: http://www.oscommerce.com BID: 9275 9277 Description: osCommerce i...

osCommerce 2.2 - 'products_id' SQL Injection

source: https://www.securityfocus.com/bid/9275/info It has been reported that one of the scripts included with osCommerce fails to validate user-supplied input, rendering it vulnerable to a SQL injection attack. It has been reported that an attacker may supply malicious SQL queries as a URI...

osCommerce Malformed Session ID XSS Vuln

Vendor : osCommerce URL : http://www.oscommerce.com Version : All Current Versions Risk : Cross Site Scripting Description: osCommerce is an online shop e-commerce solution under on going development by the open source community. Its feature packed out-of-the-box installation allows store owners ...

osCommerce 2.2 - osCsid Cross-Site Scripting

osCommerce 2.2 - osCsid Cross-Site Scripting source: https://www.securityfocus.com/bid/9238/info It has been reported that osCommerce may be prone to a cross-site scripting vulnerability that may allow an attacker to construct a malicious link containing HTML or script code that may be rendered i...

osCommerce 2.2 - 'osCsid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9238/info It has been reported that osCommerce may be prone to a cross-site scripting vulnerability that may allow an attacker to construct a malicious link containing HTML or script code that may be rendered in a user's browser. Successful exploitation o...

osCommerce 2.2-MS1 SQL Injection Vulnerability

Vendor : osCommerce URL : http://www.oscommerce.com Version : osCommerce 2.2-MS1 / Older Versions? Risk : SQL Injection Vulnerability Description: osCommerce is an online shop e-commerce solution under on going development by the open source community. Its feature packed out-of-the-box installati...

osCommerce 2.2 - SQL Injection

!/usr/bin/perl source: https://www.securityfocus.com/bid/9211/info It has been reported that one of the scripts included with osCommerce fails to validate user-supplied input, rendering it vulnerable to a SQL injection attack. The script in question is used to verify account details during the ne...

osCommerce 2.2 - SQL Injection

osCommerce 2.2 - SQL Injection !/usr/bin/perl source: https://www.securityfocus.com/bid/9211/info It has been reported that one of the scripts included with osCommerce fails to validate user-supplied input, rendering it vulnerable to a SQL injection attack. The script in question is used to verif...

osCommerce 2.2 - Authentication Bypass

osCommerce 2.2 - Authentication Bypass source: https://www.securityfocus.com/bid/7357/info osCommerce has been reported prone to authentication bypass vulnerability. It has been reported that osCommerce uses HTTP header information as a part of its authentication mechanism. Reportedly an attacker...

osCommerce 2.2 - product_info.php Denial of Service

osCommerce 2.2 - productinfo.php Denial of Service source: https://www.securityfocus.com/bid/7351/info It has been reported that an attacker may trigger a denial of service condition in osCommerce application. If malicious URI parameters are passed to several of the osCommerce PHP pages, the mySQ...

osCommerce 2.2 - 'product_info.php' Denial of Service

source: https://www.securityfocus.com/bid/7351/info It has been reported that an attacker may trigger a denial of service condition in osCommerce application. If malicious URI parameters are passed to several of the osCommerce PHP pages, the mySQL and web server hosting osCommerce reportedly...

osCommerce 2.2 - Authentication Bypass

source: https://www.securityfocus.com/bid/7357/info osCommerce has been reported prone to authentication bypass vulnerability. It has been reported that osCommerce uses HTTP header information as a part of its authentication mechanism. Reportedly an attacker may spoof parts of the HTTP header and...

osCommerce 2.2ms1 Multiple Script XSS

osCommerce is a widely installed open source shopping e-commerce solution. An attacker may use it to perform a cross-site scripting attack on this host. %NASLMINLEVEL 70300 written by K-Otik.com osCommerce Cross Site Scripting Bugs Ref added by rd : Message-ID: From: Daniel Alcantara de la Hoz To...

osCommerce 2.1/2.2 - 'Checkout_Payment.php' Error Output Cross-Site Scripting

source: https://www.securityfocus.com/bid/7155/info Error output is not sufficiently sanitized of HTML and script code by osCommerce. This may allow for cross-site scripting attacks as remote users could create a malicious link to a site hosting osCommerce which contains hostile HTML and script...

[IPS] osCommerce multiple XSS vulnerabilities

iProyectos Security Advisory: XSS Bugs in osCommerce 1. Problem description. 2. Risk 3. Solution 4. Manual fix 5. About iProyectos ------------------------------------ 1. Problem description: osCommerce is a widely installed open source shopping e-commerce solution. Some XSS cross-site scripting...

osCommerce 2.12.2 - Info_Message Cross-Site Scripting

osCommerce 2.12.2 - InfoMessage Cross-Site Scripting source: https://www.securityfocus.com/bid/7153/info It has been reported that osCommerce does not sufficiently filter URI parameters supplied to multiple osCommerce scripts. As a result of this deficiency, it is possible for a remote attacker t...