EUVD-2009-2028

Malware in sbrugna...

CVE-2006-5197

PDshopPro stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 /pdshoppro.mdb, 2 /data/pdshoppro.mdb, or 3 /shoppro/data/pdshoppro.mdb...

Cross site scripting

Cross-site scripting XSS vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2009-2032

Cross-site scripting XSS vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2009-2032

PDshopPro is affected by a Cross-site Scripting (XSS) vulnerability in search.asp, exploitable via the search parameter for versions downloaded before 20070308. The issue allows remote attackers to inject arbitrary Web script or HTML. No explicit exploit details, scope, nor remediation are provid...

CVE-2009-2032

Cross-site scripting XSS vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter...

PDshopPro Cross Site Scripting

=========================================================================================== Title : Cross-site Scripting XSS Vulnerability Software : PDshopPro Vendor : http://www.pagedowntech.com/products Date : 10 June 2009 Indonesia Author : Vrs-hCk Contact : [email protected] Blog :...

CVE-2006-5197

PDshopPro stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 /pdshoppro.mdb, 2 /data/pdshoppro.mdb, or 3 /shoppro/data/pdshoppro.mdb...

CVE-2006-5197

PDshopPro stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 /pdshoppro.mdb, 2 /data/pdshoppro.mdb, or 3 /shoppro/data/pdshoppro.mdb...

CVE-2006-5197

PDshopPro (CVE-2006-5197) suffers from insufficient access control, exposing the backend database under the web root. A remote attacker can download the database by directly requesting one of: /pdshoppro.mdb, /data/pdshoppro.mdb, or /shoppro/data/pdshoppro.mdb. This is a direct exposure of sensit...