Peel-shopping Cross-Site Scripting Vulnerability

Peel shopping is an open source e-commerce solution. A cross-site scripting vulnerability exists in Peel shopping peel-shopping910 version. A remote attacker can exploit this vulnerability by accessing an administrative account and injecting JavaScript code into the 'Site Name EN' parameter...

CVE-2018-1000887

Cross-site scripting vulnerability in Peel-shopping peel-shopping_9_1_0 allows an authenticated administrator to inject JavaScript via the Site Name EN parameter. Impact and exploitation details are as stated; no patch/version fixes are specified in the provided documents.

Peel Shopping Cart 9.0.0 Cross Site Request Forgery / Cross Site Scripting

================================================= Synopsis: Post XSS with dual CSRF via inproper sanitized user input. Product: Peel Shopping Cart Version: 9.0.0 Researcher: Matt Landers [email protected] twitter.com/matthewjland https://mjlanders.org/...

Peel Shopping Cart 9.0.0 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

Exploit for php platform in category web applications ================================================= Synopsis: Post XSS with dual CSRF via inproper sanitized user input. Product: Peel Shopping Cart Version: 9.0.0 Researcher: Matt Landers email protected twitter.com/matthewjland...

DEBIAN-CVE-2017-15115

The sctpdopeeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service use-after-free and system crash or possibly have unspecified other impact via crafted syste...

UBUNTU-CVE-2017-15115

The sctpdopeeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service use-after-free and system crash or possibly have unspecified other impact via crafted syste...

UBUNTU-CVE-2017-6353

net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service invalid unlock and double free via a multithreaded application. NOTE: this vulnerability exists because...

CVE-2017-6353

net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service invalid unlock and double free via a multithreaded application. NOTE: this vulnerability exists because...

DEBIAN-CVE-2017-6353

net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service invalid unlock and double free via a multithreaded application. NOTE: this vulnerability exists because...

Double free

net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service invalid unlock and double free via a multithreaded application. NOTE: this vulnerability exists because...

CVE-2017-6353

net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service invalid unlock and double free via a multithreaded application. NOTE: this vulnerability exists because...

Peel Shopping Object Injection Vulnerability

PEEL SHOPPING is an online shopping mall program. A security vulnerability exists in Peel SHOPPING version 8.0.2. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands via the id parameter...

Peel Shopping 8.0.2 Object Injection

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Peel Shopping 8.0.2 Fixed in: 8.0.3 Fixed Version Link: www.peel-shopping.com Vendor Website: www.peel-shopping.com Vulnerability Type: Object Injection Remote Exploitable: Yes Reported to vendor: 04/11/2016 Disclosed to...

PEEL Premium 5.71 SQL Injection Vulnerability

No description provided by source. ============================================ PEEL eCommerce Premium v5.71 - SQL Injection Vulnerability ============================================ My + Author : KnocKout + Greatz : DaiMon & ALL MUSLIM HACKERS!! Contact : [email protected] Software info Script ...

Peel SHOPPING 2.8& 2.9 - XSS/SQL Injections Vulnerability

No description provided by source. +-------------------------------------------------------------------------+ Exploit Title : Peel SHOPPING - version 2.8 and version 2.9 xss/sql inject Vulnerability version : v2.9 Author : Cyber-Crystal Date : n/a Software Link : http://www.peel.fr/ || or...

CVE-2012-5226

Multiple cross-site scripting XSS vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 motclef parameter to achat/recherche.php or 2 PATHINFO to index.php...

CVE-2012-5227

SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5227

SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5226

Multiple cross-site scripting XSS vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 motclef parameter to achat/recherche.php or 2 PATHINFO to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 motclef parameter to achat/recherche.php or 2 PATHINFO to index.php...