EUVD-2017-17072

Malware in sbrugna...

EUVD-2008-6728

Malware in sbrugna...

CVE-2017-8110

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...

eCommerce Shopsoftware XML External Entity Injection Vulnerability

eCommerce Shopsoftware eCommerce Shop Software is an open source online store system. An XML external entity injection vulnerability exists in the api/it-recht-kanzlei/api-it-recht-kanzlei.php file in eCommerce Shopsoftware version 2.0.2.2 rev 10690. An attacker could exploit this vulnerability t...

Code injection

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...

CVE-2017-8110

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...

CVE-2017-8110

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...

CVE-2017-8110

CVE-2017-8110 affects www.modified-shop.org’s eCommerce Shopsoftware 2.0.2.2 rev 10690, with an XML External Entity (XXE) vulnerability in api/it-recht-kanzlei/api-it-recht-kanzlei.php. The CNVD entry notes risk of reading arbitrary files or DoS via XXE; other sources corroborate the same vulnera...

CVE-2016-3694

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the 1 ordersstatus or 2 customersstatus parameter to api/easybill/easybillcsv.php...

CVE-2016-3694

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the 1 ordersstatus or 2 customersstatus parameter to api/easybill/easybillcsv.php...

Sql injection

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the 1 ordersstatus or 2 customersstatus parameter to api/easybill/easybillcsv.php...

CVE-2016-3694

CVE-2016-3694 affects modified eCommerce Shopsoftware 2.0.0.0 revision 9678. The vulnerability is a GET-based SQL injection: the parameters orders_status and customers_status passed to api/easybill/easybillcsv.php are not adequately filtered, enabling remote attackers to execute arbitrary SQL com...

modified eCommerce Shopsoftware 2.0.0.0 rev 9678 - Blind SQL Injection

No description provided by source...

modified eCommerce Shopsoftware 2.0.0.0 rev 9678 - Blind SQL Injection

Exploit for php platform in category web applications...

xt:Commerce Shopsoftware (fckeditor) Arbitrary File Upload Vulnerability

No description provided by source...

xt:Commerce Shopsoftware Arbitrary File Upload

============================================================= xt:Commerce Shopsoftware fckeditor File Upload Vulnerability ============================================================= Exploit Title: xt:Commerce Shopsoftware fckeditor Date: 08/11/2010 Author: Net.Edit0r Software Link:...

xt:Commerce Shopsoftware 34 - FCKeditor Arbitrary File Upload

xt:Commerce Shopsoftware 34 - FCKeditor Arbitrary File Upload ============================================================= xt:Commerce Shopsoftware fckeditor File Upload Vulnerability ============================================================= Exploit Title: xt:Commerce Shopsoftware fckeditor...

xt:Commerce Shopsoftware 3/4 - 'FCKeditor' Arbitrary File Upload

============================================================= xt:Commerce Shopsoftware fckeditor File Upload Vulnerability ============================================================= Exploit Title: xt:Commerce Shopsoftware fckeditor Date: 08/11/2010 Author: Net.Edit0r Software Link:...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/upload/...

CVE-2008-6768

CVE-2008-6768 concerns an unrestricted file upload vulnerability in the K&S Shopsoftware product, specifically in the admin/editor/images.php module. The issue arises when an attacker uploads a file with an executable extension, which can then be accessed via a direct request to the uploaded file...