aMember Pro 2.3.X - Remote File Include Vulnerability

aMember Pro 2.3.X - Remote File Include Vulnerability NewAngels Advisory 2 aMember Pro 2.3.X - Remote File Include Vulnerability ============================================================================= Software: aMember Pro 2.3.4 Type: Remote PHP File Include Vulnerability Risk: High Date:...

[NewAngels Advisory] aMember Pro 2.3.X - Remote File Include Vulnerability

NewAngels Advisory 2 aMember Pro 2.3.X - Remote File Include Vulnerability ======================================================================== ===== Software: aMember Pro 2.3.4 Type: Remote PHP File Include Vulnerability Risk: High Date: Aug. 16 2005 Vendor: CGI Central Credit: =======...

aMemberPro234.txt

NewAngels Advisory 2 aMember Pro 2.3.X - Remote File Include Vulnerability ============================================================================= Software: aMember Pro 2.3.4 Type: Remote PHP File Include Vulnerability Risk: High Date: Aug. 16 2005 Vendor: CGI Central Credit: =======...

dc_metacart_sqling.txt

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: MetaCart2 for PayFlow Multiple S...

CVE-2005-1363

Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via 1 intCatalogID, 2 strSubCatalogID, or 3 strSubCatalogNAME parameter to productsByCategory.asp, 4 curCatalogID, 5 strSubCatalogNAME, 6 intCatalogID, or 7 page parameter to...

CVE-2005-1363

MetaCart E‑Shop (MetaCart 2.0 for PayFlow) running on ASP is affected by multiple SQL injection vulnerabilities in productsByCategory.asp and product.asp. Lack of input validation allows remote attackers to craft parameters such as intCatalogID, strSubCatalogID, strSubCatalog_NAME, curCatalogID, ...

CVE-2005-1363

Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via 1 intCatalogID, 2 strSubCatalogID, or 3 strSubCatalogNAME parameter to productsByCategory.asp, 4 curCatalogID, 5 strSubCatalogNAME, 6 intCatalogID, or 7 page parameter to...

MetaCart2 for PayFlow Multiple Sql Injection Vulnerabilities

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: MetaCart2 for PayFlow Multiple S...

CVE-2004-1209

Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase...

CVE-2004-1209

CVE-2004-1209 affects Verisign Payflow Link. When run with empty Accepted URL fields, it does not properly verify the data in the hidden AMOUNT field, enabling remote attackers to modify purchase prices. Documents indicate impact on integrity (partial) with network attack vector and no confidenti...

CVE-2004-1209

Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase...

[SHK-001]Payflow Link Default Config may lead to Hidden Field Modification

Shirkdog Security Advisory SHK-001 Title: ------- Payflow Link Default Config may lead to Hidden Field Modification Description of Application: ------------------------------------ http://verisign.com/products-services/payment-processing/online-payment/payflow-link/index.html careful with the lin...