CVE-2012-4932

Multiple cross-site scripting XSS vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via 1 the having parameter in a manage action to index.php; 2 the Email field in an Add User action; 3 the Customer Name field in an Add...

Shopex旗下产品Ecmall支付漏洞

简要描述： Shopex旗下产品Ecmall支付漏洞 详细说明： 最近在用ecmall搭建一个站点，却发现这坑爹的功能，哪能否送我个ECMALL的商业授权呀。 漏洞证明：...

Paypal Core Bug Bounty #3 - Persistent Web Vulnerability

Document Title: =============== Paypal Core Bug Bounty 3 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=635 Release Date: ============= 2012-12-12 Vulnerability Laboratory ID VL-ID: ==================================== 635...

SimpleInvoices 2011.1 Cross-Site-Scripting (XSS) Vulnerabilities CVE-2012-4932

Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...

SimpleInvoices 2011.1 Cross Site Scripting

Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...

PayPal Persistent Listing Cross Site Scripting

Title: ====== Paypal BugBounty 2 - Persistent Listing Web Vulnerability Date: ===== 2012-11-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=634 VL-ID: ===== 634 Common Vulnerability Scoring System: ==================================== 4 Introduction: =============...

Paypal BBP #2 - Persistent Listing Web Vulnerability

Document Title: =============== Paypal BBP 2 - Persistent Listing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=634 Release Date: ============= 2012-11-25 Vulnerability Laboratory ID VL-ID: ==================================== 634...

Paypal Bug Bounty #21 - Persistent Encoding Vulnerability

Document Title: =============== Paypal Bug Bounty 21 - Persistent Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=684 Release Date: ============= 2012-11-24 Vulnerability Laboratory ID VL-ID: ==================================== 68...

Paypal Bug Bounty #21 - Persistent Encoding Vulnerability

Document Title: =============== Paypal Bug Bounty 21 - Persistent Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=684 Release Date: ============= 2012-11-24 Vulnerability Laboratory ID VL-ID: ==================================== 68...

Paypal Bug Bounty #27 - Community Web Vulnerability

Document Title: =============== Paypal Bug Bounty 27 - Community Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=704 Release Date: ============= 2012-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 704 Comm...

Paypal Bug Bounty #27 - Community Web Vulnerability

Document Title: =============== Paypal Bug Bounty 27 - Community Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=704 Release Date: ============= 2012-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 704 Comm...

Attackers Had Access for Months in South Carolina Data Breach

Attackers had two months of unfettered access to South Carolina’s Department of Revenue systems in a classic targeted attack that began with a phishing email and ended with the loss of electronic tax return data, and payment card and personal information on 3.8 million filers, possibly dating bac...

Paypal Bug Bounty #11 - Redirection Web Vulnerability

Document Title: =============== Paypal Bug Bounty 11 - Redirection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=648 Release Date: ============= 2012-11-21 Vulnerability Laboratory ID VL-ID: ==================================== 648...

weBid 1.0.5 - Directory Traversal

weBid 1.0.5 - Directory Traversal Author: loneferret of Offensive Security Product: WeBid Version: 1.0.4 & 1.0.5 and maybe older versions Vendor Site: http://www.webidsupport.com Software Download:...

WeBid <= 1.0.5 Directory Traversal Vulnerability

Exploit for php platform in category web applications Author: loneferret of Offensive Security Product: WeBid Version: 1.0.4 & 1.0.5 and maybe older versions Vendor Site: http://www.webidsupport.com Software Download:...

CVE-2012-4482

The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors...

Information disclosure

The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors...

CVE-2012-4482

The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors...

CVE-2012-4482

CVE-2012-4482 affects the Ubercart SecureTrading Payment Method module 6.x for Drupal. The root cause is that payment notification information is not properly verified, enabling remote attackers to complete a purchase without payment via unspecified vectors. The connected sources (including NVD a...

CVE-2012-4934

TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL...