CVE-2018-25397

PHP-SHOP 1.0 is affected by a cross-site request forgery in the users.php endpoint. An unauthenticated attacker can craft a page with a hidden form that automatically POSTs parameters (name, email, password, permissions) to create an admin account, by convincing an authenticated administrator to ...

EUVD-2010-4801

Malware in sbrugna...

EUVD-2009-4538

Malware in sbrugna...

EUVD-2008-6425

Malware in sbrugna...

EUVD-2004-2002

Malware in sbrugna...

EUVD-2009-4537

Malware in sbrugna...

EUVD-2009-4536

Malware in sbrugna...

EUVD-2011-1084

Malware in sbrugna...

EUVD-2008-0691

Malware in sbrugna...

CVE-2011-1069

PHPShop through 0.8.1 has XSS...

CVE-2011-1069

PHPShop through 0.8.1 has XSS...

Cross site scripting

PHPShop through 0.8.1 has XSS...

CVE-2011-1069

PHPShop through 0.8.1 has XSS...

CVE-2011-1069

CVE-2011-1069 affects PHPShop up to version 0.8.1, where the vulnerability is cross-site scripting (XSS). The available connected sources indicate the affected product and the XSS issue, with the NVD metrics showing a CVSS v2 base score of 4.3 (Medium) and CVSS v3.1 base score of 6.1 (Medium). Th...

phpShop <= 0.8.1 - Remote SQL injection / Filter Bypass Vulnerabilities

No description provided by source. Vendor : PHPShop Webiste : http://www.phpshop.org Version : v0.8.1 Author: the redc0ders / theredc0dersatgmaildotcom Condition: magicquotegpc = off , in php.ini setting Details : ========== Vulnerable Code in index.php near lines 98 - 128 code // basic SQL injec...

PHPShop 0.6 - Bypass Vulnerability

No description provided by source. ======================================================================================== | Title : PHPShop Version 0.6 by pass Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

CMS phpshop 2.0 - SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = 'SSV-77845' vul ID version = '1' author = 'hh' vulDate = '2013-01-14' createDate ...

phpshop 0.8.1 - Multiple Vulnerabilities

No description provided by source. Vendor: http://www.phpshop.org/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it SQL INJECTION http://server/phpshop-0.8.1/?page=admin/functionlist&moduleid=111111' union select...

PhpShop Core <= 0.9.0 RC1 (PS_BASE) File Include Vulnerabilities

No description provided by source. --------------------------------------|| Viva Palestine ||----------------------------------------- PhpShop-Core append.php Remot File Include Vulnerability Found By : CoLd Zero Wasem898 Source : includeonce $4AZHARTeAM.Securty.; PalesTine Arab Muslim Hacker's...

PHPShop CMS多个SQL注入漏洞

BUGTRAQ ID: 57320 phpShop是一款基于WEB的电子商务程序。 PHPShop CMS 2.0及之前版本存在安全漏洞，成功利用可允许攻击者控制应用、访问或修改数据、执行未授权操作。 0 phpShop 厂商补丁： phpShop ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.phpshop.org/ http://www.example.com/phpshop 2.0/?page=admin/functionlistmoduleid=11' union select...