45 matches found
EUVD-2008-2406
Malware in sbrugna...
EUVD-2010-5017
Malware in sbrugna...
CVE-2025-4312: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit...
CVE-2024-4074
A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file prodInfo.php. The manipulation of the argument prodId leads to cross site scripting. The attack may be launche...
CVE-2024-4074
A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file prodInfo.php. The manipulation of the argument prodId leads to cross site scripting. The attack may be launche...
Kashipara Online Furniture Shopping Ecommerce Website SQL注入漏洞
Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A SQL injection vulnerability exists in Kashipara Online Furniture Shopping Ecommerce Website due to a SQL injection vulnerability in the prodId parameter of the prodInfo.php file...
PT-2024-29018 · Unknown · Kashipara Online Furniture Shopping Ecommerce Website
Name of the Vulnerable Software and Affected Versions: Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description: A vulnerability was found in the file prodInfo.php, where the manipulation of the prodId argument leads to cross site scripting. The attack may be launched remotel...
CVE-2024-4071: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This issue affects some unknown processing of the file prodInfo.php. The manipulation of the argument prodId leads to sql injection. The attack may be initiated remotely. The exploit...
Kashipara Online Furniture Shopping Ecommerce Website 跨站脚本漏洞
Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A cross-site scripting vulnerability exists in Kashipara Online Furniture Shopping Ecommerce Website, which originates from a cross-site scripting vulnerability in the prodId paramete...
CVE-2024-4074: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file prodInfo.php. The manipulation of the argument prodId leads to cross site scripting. The attack may be launche...
Electricks eCommerce 1.0 - 'prodid' SQL Injection
Exploit Title: Electricks eCommerce 1.0 - 'prodid' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/billyblue Software Link: https://www.sourcecodester.com/sites/default/files/download/billyblue/electricks.zip Version: 1.0...
dafna.biz XSS vulnerability
Vulnerable URL: http://www.dafna.biz/Catalog.asp?Page=NewShowProd.asp"=335699 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
ECommerceMajor - 'productdtl.php?prodid' SQL Injection
Exploit Title : ECommerceMajor SQL Injection Vulnerability Exploit Author : Rahul Pratap Singh Date : 13/Dec/2015 Home page Link : https://github.com/xlinkerz/ecommerceMajor Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 1. Description "prodid" field i...
Pre Shopping Mall 1.0 - Remote SQL Injection Vulnerability
No description provided by source. ============================================== Pre Shopping Mall v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Exploit:...
ZeusCart - 'prodid' SQL Injection
source: https://www.securityfocus.com/bid/68182/info ZeusCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...
PT-2011-1988
Name of the Vulnerable Software and Affected Versions Joomla! component com xobbix version 1.0.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the prodid parameter in a prod desc action to "index.php". Recommendations For version 1.0.1, avoi...
CVE-2010-5053: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the XOBBIX comxobbix component 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a proddesc action to index.php...
CVE-2010-4908
SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid parameter...
