29 matches found
EUVD-2007-3917
Malware in sbrugna...
EUVD-2006-2054
Malware in sbrugna...
QuickEStore 6.1 Backup Dump Vulnerability
No description provided by source...
QuickEStore 7.9 - SQL Injection and Path Diclosure Download Vulnerability
No description provided by source...
QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability
No description provided by source. author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password:...
QuickEStore 6.1 Database Disclosure
======================================================================================== | Title : QuickEStore 6.1 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu ...
QuickEStore 6.1 - Backup Dump
======================================================================================== | Title : QuickEStore 6.1 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu ...
QuickEStore 6.1 - Backup Dump
QuickEStore 6.1 - Backup Dump ======================================================================================== | Title : QuickEStore 6.1 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 ...
QuickEStore 6.1 Backup Dump Vulnerability
Exploit for multiple platform in category web applications ========================================= QuickEStore 6.1 Backup Dump Vulnerability ========================================= ======================================================================================== | Title : QuickEStore 6...
QuickEStore 7.9 SQL Injection
======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
QuickEStore v.7.9 SQL Injection and Path Diclosure Download Vulnerability
No description provided by source. ======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 -...
QuickEStore 7.9 - SQL Injection Full Path Disclosure Download
QuickEStore 7.9 - SQL Injection Full Path Disclosure Download ======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Hom...
QuickEStore v.7.9 SQL Injection and Path Diclosure Download
Exploit for unknown platform in category web applications ========================================================================= QuickEStore v.7.9 SQL Injection and Path Diclosure Download Vulnerability =========================================================================...
QuickEStore 7.9 - SQL Injection / Full Path Disclosure Download
======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
QuickEStore insertorder.cfm CFTOKEN Parameter SQL Injection
The remote host is running QuickEStore, a shopping cart application writtein in Cold Fusion. The version of QuickEStore installed on the remote host fails to sanitize input to the 'CFTOKEN' parameter of the 'insertorder.cfm' script before using it in database queries. An unauthenticated attacker...
Sql injection
SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the CFTOKEN parameter, a different vector than CVE-2006-2053...
CVE-2007-3933
SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the CFTOKEN parameter, a different vector than CVE-2006-2053...
CVE-2007-3933
SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the CFTOKEN parameter, a different vector than CVE-2006-2053...
CVE-2007-3933
CVE-2007-3933 is linked to a QuickEStore SQL injection in insertorder.cfm via the CFTOKEN parameter. The Nessus plugin details a remote exploit against QuickEStore versions 8.2 and earlier, enabling arbitrary SQL commands due to unsanitized input in database queries. The note states this is a dif...
quickestore-sql.txt
author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1 union...