Peel E-Commerce SQL Injection

!/usr/bin/python This was written for educational purpose only. Use it at your own risk. Author will be not responsible for any damage! !!! Special greetz for my friend sinner01 !!! !!! Special thanx for d3hydr8,low1z and rsauron who inspired me !!! . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/...

Peel Shopping 3.1 (index.php rubid) SQL Injection Vulnerability

No description provided by source. SuB-ZeRo Dz-hackers PEEL Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : http://www.peel.fr/ +downloader :...

Peel Shopping 3.1 - rubid SQL Injection

Peel Shopping 3.1 - rubid SQL Injection SuB-ZeRo Dz-hackers PEEL Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : http://www.peel.fr/ +downloader :...

Peel Shopping 3.1 SQL Injection

SuB-ZeRo Dz-hackers PEEL Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : http://www.peel.fr/ +downloader :...

Peel Shopping 3.1 (index.php rubid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Peel Shopping 3.1 index.php rubid SQL Injection Vulnerability =============================================================== PEEL Remote SQL Injection Vulnerability...

Peel Shopping 3.1 - 'rubid' SQL Injection

SuB-ZeRo Dz-hackers PEEL Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : http://www.peel.fr/ +downloader :...

CVE-2008-1506

PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function...

CVE-2008-1507

PEEL, possibly 3.x and earlier, has 1 a default [email protected] account with password admin, and 2 a default [email protected] account with password cinema, which allows remote attackers to gain administrative access...

Default credentials

PEEL, possibly 3.x and earlier, has 1 a default email protected account with password admin, and 2 a default email protected account with password cinema, which allows remote attackers to gain administrative access...

Information disclosure

PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function...

CVE-2008-1507

PEEL, possibly versions 3.x and earlier, contains default credentials: [email protected] with password admin and [email protected] with password cinema, which allows remote attackers to gain administrative access. This CVE (CVE-2008-1507) is documented with multiple sources (NVD, CVE List, PrIon, CVELIS...

CVE-2008-1507

PEEL, possibly 3.x and earlier, has 1 a default [email protected] account with password admin, and 2 a default [email protected] account with password cinema, which allows remote attackers to gain administrative access...

CVE-2008-1506

CVE-2008-1506 affects PEEL (possibly 3.x and earlier). The vulnerability allows remote attackers to obtain configuration information by directly requesting phpinfo.php, which calls PHP’s phpinfo function. This is a straightforward information-disclosure issue (partial confidentiality impact) stem...

CVE-2008-1506

PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function...

Unrestricted file upload

Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an ajout action, as demonstrated by 1 image/gif and 2 application/pdf...

CVE-2008-1495

Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an ajout action, as demonstrated by 1 image/gif and 2 application/pdf...

CVE-2008-1496

Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to a membre.php, and the 2 timestamp parameter to b the details action in achat/historiquecommandes.php and c the facture action in...

Sql injection

Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to a membre.php, and the 2 timestamp parameter to b the details action in achat/historiquecommandes.php and c the facture action in...

CVE-2008-1495

The vulnerability CVE-2008-1495 affects PEEL (likely 3.x and earlier) in the administrer/produits.php file, where an unrestricted file upload allows remote authenticated administrators to upload and execute arbitrary PHP files by altering the content type during an ajout action (demonstrated with...

CVE-2008-1496

CVE-2008-1496 describes multiple SQL injection vulnerabilities in PEEL (likely 3.x and earlier), where remote attackers could execute arbitrary SQL commands via the (1) email parameter to membres.php and the (2) timestamp parameter to the details action in achat/historique_commandes.php and the f...