EUVD-2017-17072

Malware in sbrugna...

EUVD-2008-6728

Malware in sbrugna...

CVE-2017-8110

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...

eCommerce Shopsoftware XML External Entity Injection Vulnerability

eCommerce Shopsoftware eCommerce Shop Software is an open source online store system. An XML external entity injection vulnerability exists in the api/it-recht-kanzlei/api-it-recht-kanzlei.php file in eCommerce Shopsoftware version 2.0.2.2 rev 10690. An attacker could exploit this vulnerability t...

Code injection

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...

CVE-2017-8110

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...

CVE-2017-8110

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...

CVE-2017-8110

CVE-2017-8110 affects www.modified-shop.org’s eCommerce Shopsoftware 2.0.2.2 rev 10690, with an XML External Entity (XXE) vulnerability in api/it-recht-kanzlei/api-it-recht-kanzlei.php. The CNVD entry notes risk of reading arbitrary files or DoS via XXE; other sources corroborate the same vulnera...

CVE-2017-8110: Improper Restriction of XML External Entity Reference

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...

Sql injection

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the 1 ordersstatus or 2 customersstatus parameter to api/easybill/easybillcsv.php...

CVE-2016-3694

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the 1 ordersstatus or 2 customersstatus parameter to api/easybill/easybillcsv.php...

CVE-2016-3694

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the 1 ordersstatus or 2 customersstatus parameter to api/easybill/easybillcsv.php...

CVE-2016-3694

CVE-2016-3694 affects modified eCommerce Shopsoftware 2.0.0.0 revision 9678. The vulnerability is a GET-based SQL injection: the parameters orders_status and customers_status passed to api/easybill/easybillcsv.php are not adequately filtered, enabling remote attackers to execute arbitrary SQL com...

CVE-2016-3694: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the 1 ordersstatus or 2 customersstatus parameter to api/easybill/easybillcsv.php...

PT-2017-8409

Name of the Vulnerable Software and Affected Versions modified eCommerce Shopsoftware version 2.0.0.0 revision 9678 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the orders status or customers status parameter to the...

modified eCommerce Shopsoftware 2.0.0.0 rev 9678 - Blind SQL Injection

No description provided by source...

modified eCommerce Shopsoftware 2.0.0.0 rev 9678 - Blind SQL Injection

Exploit for php platform in category web applications...

xt:Commerce Shopsoftware (fckeditor) Arbitrary File Upload Vulnerability

No description provided by source...

xt:Commerce Shopsoftware Arbitrary File Upload

============================================================= xt:Commerce Shopsoftware fckeditor File Upload Vulnerability ============================================================= Exploit Title: xt:Commerce Shopsoftware fckeditor Date: 08/11/2010 Author: Net.Edit0r Software Link:...

xt:Commerce Shopsoftware 34 - FCKeditor Arbitrary File Upload

xt:Commerce Shopsoftware 34 - FCKeditor Arbitrary File Upload ============================================================= xt:Commerce Shopsoftware fckeditor File Upload Vulnerability ============================================================= Exploit Title: xt:Commerce Shopsoftware fckeditor...