osCommerce Addon Customer Testimonials 3.1 - SQL Injection

osCommerce Addon Customer Testimonials 3.1 - SQL Injection osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...

osCommerce Addon Customer Testimonials 3.1 SQL Injection Vulnerability

No description provided by source. osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...

osCommerce Addon Customer Testimonials 3.1 - SQL Injection

osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...

123tkShop 0.9.1 Remote Authentication Bypass Vulnerability

No description provided by source. By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...

123tkShop 0.9.1 - Remote Authentication Bypass

123tkShop 0.9.1 - Remote Authentication Bypass By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...

123tkShop 0.9.1 - Remote Authentication Bypass

By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...

123tkShop 0.9.1 Remote Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ========================================================== 123tkShop 0.9.1 Remote Authentication Bypass Vulnerability ========================================================== By Michael Brooks Vulnerability:Sql Injection Software:123tkSh...

osCommerce Online Merchant v2.2 RC1 local include bug

osCommerce Online Merchant v2.2 RC1 local include bug SEVERITY: ========= Normal SOFTWARE: ========= osCommerce Online Merchant v2.2 RC1 http://oscommerce.com/ INFO: ===== osCommerce is an Open Source based online shop e-commerce solution that is available for free under the GNU General Public...

Wrapper.php for osCommerce - Local File Inclusion

source: https://www.securityfocus.com/bid/24565/info Wrapper.php for OsCommerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...

Wrapper.php for osCommerce - Local File Inclusion

Wrapper.php for osCommerce - Local File Inclusion source: https://www.securityfocus.com/bid/24565/info Wrapper.php for OsCommerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view...

phppos-rfi.txt

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= PHP Point Of Sale for osCommerce = index.php Remote File Include Vuln Script: PHP Point Of Sale for osCommerce Version: 1.1 URL: http://puzzle.dl.sourceforge.net/sourceforge/phppointofsale/PHPPointOfSaleosCommerce1.1.zip Discover: BorN To...

PHP Point Of Sale for osCommerce <= (index.php) Remote File Include Vuln

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= PHP Point Of Sale for osCommerce = index.php Remote File Include Vuln Script: PHP Point Of Sale for osCommerce Version: 1.1 URL: http://puzzle.dl.sourceforge.net/sourceforge/phppointofsale/PHPPointOfSaleosCommerce1.1.zip Discover: BorN To...

CVE-2007-1477

Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfglanguage parameter. NOTE: this issue has been disputed by CVE, since the cfglanguage variable is configured upon...

Directory traversal

Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfglanguage parameter. NOTE: this issue has been disputed by CVE, since the cfglanguage variable is configured upon...

CVE-2007-1477

CVE-2007-1477 affects PHP Point Of Sale for osCommerce v1.1. The vulnerability is a directory traversal in the index.php file, exploitable via a ".." sequence in the cfg_language parameter, allowing remote attackers to include and execute local files. Documentation notes that the issue has been d...

CVE-2007-1477

Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfglanguage parameter. NOTE: this issue has been disputed by CVE, since the cfglanguage variable is configured upon...

PT-2007-2871 · Oscommerce · Php Point Of Sale For Oscommerce

Name of the Vulnerable Software and Affected Versions: PHP Point Of Sale for osCommerce version 1.1 Description: The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfg language parameter in index.php. However, it's noted that this issue has been...

CVE-2006-6533

Directory traversal vulnerability in admin/templatesboxeslayout.php in osCommerce 3.0a3 allows remote attackers to include and execute arbitrary PHP files via a .. dot dot in the filter parameter. NOTE: this issue can be leveraged to obtain full path information in error messages...

CVE-2006-6534

Multiple cross-site scripting XSS vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the 1 set parameter to admin/modules.php, the 2 selectedbox parameter to definitiva/admin/customers.php, the 3 lID parameter to admin/languagesdefinitions.php, o...

CVE-2006-6533

Directory traversal vulnerability in admin/templatesboxeslayout.php in osCommerce 3.0a3 allows remote attackers to include and execute arbitrary PHP files via a .. dot dot in the filter parameter. NOTE: this issue can be leveraged to obtain full path information in error messages...