quickestore-sql.txt

author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1 union...

QuickEStore 8.2 - 'insertorder.cfm' SQL Injection

author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1 union...

QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= QuickEStore = 8.2 insertorder.cfm Remote SQL Injection Vulnerability ======================================================================= web application:QuickEStor...

QuickEStore 8.2 - insertorder.cfm SQL Injection

QuickEStore 8.2 - insertorder.cfm SQL Injection author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password:...

CVE-2006-2053

Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the OrderID parameter in a shipping.cfm and b checkout.cfm, 2 ItemID parameter in c proddetail.cfm, 3 SubCatID parameter in d index.cfm, the 4 CategoryID parameter ...

Sql injection

Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the OrderID parameter in a shipping.cfm and b checkout.cfm, 2 ItemID parameter in c proddetail.cfm, 3 SubCatID parameter in d index.cfm, the 4 CategoryID parameter ...

CVE-2006-2053

CVE-2006-2053 affects QuickEStore 7.9 and earlier. The vulnerability consists of multiple SQL injection flaws allowing remote execution of arbitrary SQL via these parameters: OrderID (shipping.cfm, checkout.cfm), ItemID (proddetail.cfm), SubCatID (index.cfm), CategoryID (prodpage.cfm), and ProdID...

CVE-2006-2053

Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the OrderID parameter in a shipping.cfm and b checkout.cfm, 2 ItemID parameter in c proddetail.cfm, 3 SubCatID parameter in d index.cfm, the 4 CategoryID parameter ...

QuickEStore 7.9 vuln.

QuickEStore 7.9 vuln. Vuln. discovered by : r0t Date: 25 april 2006 vendorlink:www.quickestore.com affected versions:7.9 and previous orginal advisory:http://pridels.blogspot.com/2006/04/quickestore-79-vuln.html Vuln. Description: 1. SQL Injection vuln. QuickEStore contains a flaw that allows a...