CVE-2019-25680

Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers can submit crafted SQL payloads in the 's' parameter of search requests to extract...

Advance Gift Shop Pro Script SQL注入漏洞

Advance Gift Shop Pro Script is an e-commerce website script program within the PHP Scripts Mall community. Version 2.0.3 of Advance Gift Shop Pro Script contains a SQL injection vulnerability. This vulnerability allows unverified attackers to execute arbitrary SQL queries without being detected...

PT-2026-30488

Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers can submit crafted SQL payloads in the 's' parameter of search requests to extract...

EUVD-2007-2326

Malware in sbrugna...

EUVD-2007-4914

Malware in sbrugna...

EUVD-2009-2019

Malware in sbrugna...

EUVD-2010-1489

Malware in sbrugna...

EUVD-2007-1849

Malware in sbrugna...

EUVD-2014-8214

Malware in sbrugna...

EUVD-2006-5551

Malware in sbrugna...

EUVD-2007-4913

Malware in sbrugna...

EUVD-2010-1490

Malware in sbrugna...

EUVD-2008-0171

Malware in sbrugna...

EUVD-2010-4824

Malware in sbrugna...

EUVD-2010-1491

Malware in sbrugna...

Shop-Script - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Shop-Script published at the 'play' market has multiple vulnerabilities...

CVE-2014-8377

Cross-site scripting XSS vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/...

Cross site scripting

Cross-site scripting XSS vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/...

CVE-2014-8377

Cross-site scripting XSS vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/...

CVE-2014-8377

The CVE-2014-8377 entry describes a Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933. The flaw allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/. Impact is partial integrit...