7 matches found
CVE-2026-77470 Lychee: Webshop checkout lets the client override the payment `amount` sent to the gateway via malicious crafted POST request
Lychee is a free, open-source photo-management tool. Prior to 7.7.1, the Supporter or Pro webshop POST /api/v2/Shop/Checkout/Process flow accepts an unrestricted additionaldata array and CheckoutService::preparePurchaseParameters merges it after server-computed purchase parameters. Because later...
EUVD-2007-2419
Malware in sbrugna...
CVE-2007-2424
CVE-2007-2424 describes a PHP remote file inclusion vulnerability in help/index.php of The Merchant (themerchant) 2.2. The issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the show parameter. The available connected documents confirm the affected software and t...
CVE-2007-2424: Undefined Security Weakness
PHP remote file inclusion vulnerability in help/index.php in The Merchant themerchant 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the show parameter...
The Merchant <= 2.2.0 (index.php show) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ==================================================================== The Merchant 2005-2006 The Merchant Project Remote File Include Exploit //'===============================================================================================...
The Merchant <= 2.2.0 (index.php show) Remote File Inclusion Exploit
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" title2005-2006 The Merchant Project Remote File Include Exploit/title script language="JavaScript"...
The Merchant 2.2.0 - 'index.php?show' Remote File Inclusion
2005-2006 The Merchant Project Remote File Include Exploit //'=============================================================================================== //'Script Name: 2005-2006 The Merchant Project //'Coded by : kezzap66345 //'Author : kezzap66345 //'Contact : [email protected]...