329 matches found
WordPress Ultimate Membership Pro 3.3 Plugin - SQL Injection
Exploit for php platform in category web applications Vendor Homepage: http://wpindeed.com/ Software Link: http://codecanyon.net/item/ultimate-membership-pro-wordpress-plugin/12159253 Version: 3.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Unauthenticated Blind SQLi, Unauthenticated Payment Bypass...
WordPress Plugin Ultimate Membership Pro 3.3 - SQL Injection
Vendor Homepage: http://wpindeed.com/ Software Link: http://codecanyon.net/item/ultimate-membership-pro-wordpress-plugin/12159253 Version: 3.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Unauthenticated Blind SQLi, Unauthenticated Payment Bypass Time line: Found 07-Jun-2016, Vendor notified...
phpshe v1.1 order.php 存在变量覆盖漏洞(导致可绕过付款)
No description provided by source...
CVE-2008-7310
Spree 0.2.0 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the Order state value and bypass the intended payment step via a modified URL, related to a "mass assignment" vulnerability...
Thelia 1.3.5 - Multiple Vulnerabilities
!/usr/bin/php | | URL: http://blackh.free.fr - http://blackh.eu | ======================================================================== | $system $argv0 -url -a -n -f | | Notes: -url ex: http://victim.com/site/ | | -a 1 : Validate Command without Payment | | -n Commmand number ex: CDE5627JOC |...
phpCoupon - Remote Payment Bypass
phpCoupon - Remote Payment Bypass source: https://www.securityfocus.com/bid/25116/info phpCoupon is prone to a remote payment-bypass vulnerability because the application fails to properly secure PayPal payment transactions. Successfully exploiting this issue allows remote attackers to perform...
[SA19626] Aweb Scripts Seller Payment Bypass Security Issue
TITLE: Aweb Scripts Seller Payment Bypass Security Issue SECUNIA ADVISORY ID: SA19626 VERIFY ADVISORY: http://secunia.com/advisories/19626/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Aweb Scripts Seller http://secunia.com/product/9350/ DESCRIPTION: benozor7...
CVE-2000-0288
CVE-2000-0288 affects Infonautics getdoc.cgi. The vulnerability allows remote attackers to bypass the payment phase for accessing documents by altering a form variable. The available sources confirm the existence and description of this issue but do not provide concrete details on affected versio...