EUVD-2007-3917

Malware in sbrugna...

EUVD-2006-2054

Malware in sbrugna...

QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability

No description provided by source. author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password:...

QuickEStore 7.9 - SQL Injection and Path Diclosure Download Vulnerability

No description provided by source...

QuickEStore 6.1 Backup Dump Vulnerability

No description provided by source...

QuickEStore 6.1 Database Disclosure

======================================================================================== | Title : QuickEStore 6.1 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu ...

QuickEStore 6.1 Backup Dump Vulnerability

Exploit for multiple platform in category web applications ========================================= QuickEStore 6.1 Backup Dump Vulnerability ========================================= ======================================================================================== | Title : QuickEStore 6...

QuickEStore 6.1 - Backup Dump

QuickEStore 6.1 - Backup Dump ======================================================================================== | Title : QuickEStore 6.1 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 ...

QuickEStore 6.1 - Backup Dump

======================================================================================== | Title : QuickEStore 6.1 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu ...

QuickEStore 7.9 SQL Injection

======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

QuickEStore v.7.9 SQL Injection and Path Diclosure Download

Exploit for unknown platform in category web applications ========================================================================= QuickEStore v.7.9 SQL Injection and Path Diclosure Download Vulnerability =========================================================================...

QuickEStore v.7.9 SQL Injection and Path Diclosure Download Vulnerability

No description provided by source. ======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 -...

QuickEStore 7.9 - SQL Injection Full Path Disclosure Download

QuickEStore 7.9 - SQL Injection Full Path Disclosure Download ======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Hom...

QuickEStore 7.9 - SQL Injection / Full Path Disclosure Download

======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

QuickEStore insertorder.cfm CFTOKEN Parameter SQL Injection

The remote host is running QuickEStore, a shopping cart application writtein in Cold Fusion. The version of QuickEStore installed on the remote host fails to sanitize input to the 'CFTOKEN' parameter of the 'insertorder.cfm' script before using it in database queries. An unauthenticated attacker...

CVE-2007-3933

SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the CFTOKEN parameter, a different vector than CVE-2006-2053...

Sql injection

SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the CFTOKEN parameter, a different vector than CVE-2006-2053...

CVE-2007-3933

SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the CFTOKEN parameter, a different vector than CVE-2006-2053...

CVE-2007-3933

CVE-2007-3933 is linked to a QuickEStore SQL injection in insertorder.cfm via the CFTOKEN parameter. The Nessus plugin details a remote exploit against QuickEStore versions 8.2 and earlier, enabling arbitrary SQL commands due to unsanitized input in database queries. The note states this is a dif...

quickestore-sql.txt

author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1 union...