pharmacy-shop.gr XSS vulnerability

Vulnerable URL: https://www.pharmacy-shop.gr/gr/el/products?utf8=%E2%9C%93=%27%22%2F%3E%3E%3C%2Fscript%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Criminals Monetizing Attacks Against Unpatched WordPress Sites

Criminals have inevitably begun to attempt to monetize attacks against WordPress sites still vulnerable to a severe REST API endpoint vulnerability silently patched in the recent 4.7.2 security update. While more than one million websites have been defaced, researchers are now beginning to see so...

Joomla Services SQL Injection

======================================================================== | Title : Joomla comservices Sql injection vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor :...

Netmeds - India Ki Pharmacy - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Netmeds - India Ki Pharmacy published at the 'play' market has multiple vulnerabilities...

pharmacie.u-clermont1.fr XSS vulnerability

Open Bug Bounty ID: OBB-91467 Description| Value ---|--- Affected Website:| pharmacie.u-clermont1.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

NetArt Media Pharmacy System 2.0 XSS / SQL Injection

Title : NetArt Media Pharmacy System SQL Injection and Cross-site Scripting Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.netartmedia.net/ Advisory : http://secpod.org/blog/?p=513 :...

Online Pharmacy Cross Site Scripting

+-------------------------------------------------------------------------+ Exploit Title : Online Pharmacy - Website XSS Cross Site Scripting Author : Atmon3r Date : 26/02/2012 Editor : Lupu, Marianna Perso : Do you want drUgs? Xss type : $GET...

One Third of Drug-Related Searches Lead to Illicit Pharmacy Sites

Researchers at the University of Cambridge will present evidence of what they say is wide spread manipulation of search results that direct unwitting Web surfers to dodgy and illicit online pharmacy sites. The research, which will be presented at the 20th USENIX Security Symposium in San Francisc...

Unfixed XSS vulnerability at search.nationalpetpharmacy.com

Security researcher tenest, has submitted on 22/06/2009 a cross-site-scripting XSS vulnerability affecting search.nationalpetpharmacy.com, which at the time of submission ranked 217897 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2009...

Sql injection

SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter in an add action...

Code injection

index.php in Pharmacy System 2 and earlier allows remote attackers to obtain sensitive information via a ' quote character in the page parameter, which reveals the table prefix in an error message...

CVE-2007-3433

SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter in an add action...

CVE-2007-3434

index.php in Pharmacy System 2 and earlier allows remote attackers to obtain sensitive information via a ' quote character in the page parameter, which reveals the table prefix in an error message...

CVE-2007-3433

CVE-2007-3433 : SQL injection in index.php of Pharmacy System 2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter in an add action. Public records (NVD/NVD mirror) confirm the vulnerability and associated CVSS v2 base score (7.5, HIGH) with network attack ...

CVE-2007-3434

index.php in Pharmacy System 2 and earlier allows remote attackers to obtain sensitive information via a ' quote character in the page parameter, which reveals the table prefix in an error message...

CVE-2007-3433

SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter in an add action...

CVE-2007-3433: Undefined Security Weakness

SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter in an add action...

CVE-2007-3434: Undefined Security Weakness

index.php in Pharmacy System 2 and earlier allows remote attackers to obtain sensitive information via a ' quote character in the page parameter, which reveals the table prefix in an error message...

CVE-2007-3434

The CVE-2007-3434 entry affects Pharmacy System 2 and earlier. A flaw in index.php allows remote attackers to obtain sensitive information by injecting a single quote in the page parameter, which in turn reveals the table prefix in an error message. The connected documents confirm the vulnerable ...

pharmacy-sql.txt

--==+================================================================================+==-- --==+ Pharmacy System v2 AND PRIOR SQL INJECTION VULNERBILITYS +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SCRIPT DOWNLOAD: PAY...