ESMI PayPal StoreFront 1.7 - 'products1.php?id2' SQL Injection

source: https://www.securityfocus.com/bid/12903/info ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query. Successful exploitation could result in a compromise ...

ESMI PayPal StoreFront 1.7 - 'pages.php?idpages' SQL Injection

source: https://www.securityfocus.com/bid/12903/info ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query. Successful exploitation could result in a compromise ...

dcrab-paypal.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: Multiple sql injection, and xss vulnerabilities in Pay pal Storefronts Date: March 25, 2005 Vendor: http://www.esmistudio.com Summary:...

LaGarde StoreFront 5.0 Shopping Cart - login.asp SQL Injection

LaGarde StoreFront 5.0 Shopping Cart - login.asp SQL Injection source: https://www.securityfocus.com/bid/13998/info StoreFront Shopping Cart is affected by an SQL injection vulnerability. The vulnerability affects the 'login.asp' script. Successful exploitation could result in a compromise of the...

LaGarde StoreFront 5.0 Shopping Cart - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13998/info StoreFront Shopping Cart is affected by an SQL injection vulnerability. The vulnerability affects the 'login.asp' script. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit...

CVE-2003-0557

SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field...

CVE-2003-0557

SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field...

CVE-2003-0557

CVE-2003-0557 describes an SQL injection vulnerability in login.asp for StoreFront 6.0 (and possibly earlier versions). The issue allows remote attackers to obtain sensitive user information via SQL statements in the password field. Per NVD metrics, the base score is 7.5 (HIGH) with network acces...

ZH2003-3SA (security advisory): Storefront sql injection: users info disclosure

ZH2003-3SA security advisory: Storefront sql injection: users info disclosure Published: 12/07/2003 Released: 12/07/2003 Name: Storefront sql injection: users info disclosure Affected Systems: StoreFront 6.0 and older versions? Issue: Remote attackers can obtain users info Author:...