Code injection

Unspecified vulnerability in the subscriptions manager in Invision Power Board IPB or IP.Board 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to 1 classgw2checkout.php, 2...

CVE-2007-4914

Unspecified vulnerability in the subscriptions manager in Invision Power Board IPB or IP.Board 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to 1 classgw2checkout.php, 2...

CVE-2007-4914

CVE-2007-4914 affects Invision Power Board (IPB/IP.Board) 2.3.1 prior to 20070912. The issue, described across multiple sources, is an unspecified vulnerability in the subscriptions manager that lets remote authenticated users change the member ID and thereby reduce the privilege level of arbitra...

CVE-2007-4914

Unspecified vulnerability in the subscriptions manager in Invision Power Board IPB or IP.Board 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to 1 classgw2checkout.php, 2...

ewire Payment Client 1.601.70 - Command Execution

ewire Payment Client 1.601.70 - Command Execution source: https://www.securityfocus.com/bid/25683/info ewire Payment Client is prone to a vulnerability that allows attackers to execute arbitrary shell commands because the software fails to sanitize user-supplied input. An attacker may leverage th...

ewire Payment Client 1.60/1.70 - Command Execution

source: https://www.securityfocus.com/bid/25683/info ewire Payment Client is prone to a vulnerability that allows attackers to execute arbitrary shell commands because the software fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary shell commands on an...

phpCoupon - Remote Payment Bypass

phpCoupon - Remote Payment Bypass source: https://www.securityfocus.com/bid/25116/info phpCoupon is prone to a remote payment-bypass vulnerability because the application fails to properly secure PayPal payment transactions. Successfully exploiting this issue allows remote attackers to perform...

phpCoupon - Remote Payment Bypass

source: https://www.securityfocus.com/bid/25116/info phpCoupon is prone to a remote payment-bypass vulnerability because the application fails to properly secure PayPal payment transactions. Successfully exploiting this issue allows remote attackers to perform payment transactions in the...

eSyndiCat Input Validation Error Vulnerability

eSyndiCat is Directory websystem, a product of eSyndiCat.com It has security hole allow attackers get admin and more and more. Infected version: eSyndiCat Pro v1.x Infected file: manage-admins.php Use poc file to attack: ------------------------------------------------ pDiscovered by H2P - A memb...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 include/payment/payflowpro.php, 2 global.php, or 3 libsecure.php, different vectors than CVE-2007-2070...

sunshop v4 >> RFI

vendor : turnkeywebtools.com by : s3rv3rhack3r [email protected] bugz: ++++++++++++++++++++ include/payment/payflowpro.php include $abspath."/include/payment/payflowpro/pfpro.class.php"; ++++++++++++++++++++ global.php requireonce $abspath."/libsecure.php"; ++++++++++++++++++++ libsecure.php inclu...

[Full-disclosure] Alibaba Alipay Remote Code Execute Vulnerability-0DAY

Alibaba Alipay Remote Code Execute Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.;et Summary: Alipay is China’s leading online payment service, and a division of Alibaba.com. It enables individuals and businesses to securely, easily and quickly send and receive payments...

paypalXSScorry.txt

-=--------------------ADVISORY-------------------=- PayPal.com Author:CorryL x0n3-h4ck.org -=----------------------------------------------------=- -=+ Application: PayPal.com -=+ Version: -=+ Vendor's URL: www.paypal.com -=+ Platform: Linux\Unix -=+ Bug type: XSS -=+ Exploitation: Remote/Local -...

Iono all version fullpath disclosure

Iono is payment system is provided by http://olate.co.uk Google search keyword: Powered by iono I checked newest version and show more files are in error: http://domain/path/templates/iono/admin/denied.tpl.php http://domain/path/templates/iono/admin/index.tpl.php ........ All file in...

SolidState 0.4 - Multiple Remote File Inclusions

SolidState 0.4 - Multiple Remote File Inclusions ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:...

For MS06-0 of 4 0 of botnet attacks to reproduce jianghu-vulnerability warning-the black bar safety net

According to the ongoing track of the virus an anti-virus expert Introduction, In addition to targeting the MS06-0 4 0 the Windows Server service vulnerability, this latest round of virus attacks also make use of the Windows System of the other three worm holes. With the month of August to appear...

CubeCart <= 3.0.11 SQL injection & cross site scripting

-------------------------------------------------------------------------------- CubeCart = 3.0.11 SQL injection & cross site scripting software: site: http://www.cubecart.com/site/home/ description: "CubeCart is an eCommerce script written with PHP & MySQL. With CubeCart you can setup a powerful...

adv32-K-159-2006.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV32$2006 --------------------------------------------------------------------------- ECHOADV32$2006 SCart 2.0 Remote Code Execution ---------------------------------------------------------------------------...

Directory traversal

Directory traversal vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to read arbitrary files via directory traversal sequences in the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...