Turnkey Ebook Store 1.1 Cross Site Scripting

Turnkey Ebook Store v1.1 - Cross site Scripting and Redirect Link: http://www.privatelabelresellrights-store.com/ebookstore/ - 31-03-2009 - Methodman - http://nemesis.te-home.net - Vulnerability was found on search module. example: - http://site.com/index.php?cmd=search&keywords="alert'XSS' -...

Turnkey eBook Store 1.1 - keywords Cross-Site Scripting

Turnkey eBook Store 1.1 - keywords Cross-Site Scripting source: https://www.securityfocus.com/bid/34324/info Turnkey eBook Store is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Turnkey eBook Store 1.1 - 'keywords' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34324/info Turnkey eBook Store is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based...

Sql injection

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a play action...

CVE-2008-5629

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a play action...

CVE-2008-5629

CVE-2008-5629 describes an SQL injection in the Turnkey Arcade Script: vulnerable component is index.php, via the id parameter in a play action. The underlying flaw allows remote attackers to inject arbitrary SQL and potentially affect data, due to the input being unsafely concatenated into queri...

CVE-2008-5629

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a play action...

CVE-2008-5629: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a play action...

btas-sql.txt

----------------Mor0ccan Nightmares---------------- ------------------------------ Script: Turnkey Arcade Script- ------------------------------ ----------------------------------- Site: http://www.turnkeyarcade.com- -----------------------------------...

turnkeyarcade-xss.txt

--------------------------------------------------------- Portal Name: Turnkey Arcade Script Vendor : http://www.turnkeyarcade.com Dork: Powered By Turnkey Arcade Script Author : PouyaServer , [email protected] Vulnerability : XSS --------------------------------------------------------- XSS...

Turnkey Arcade Script (id) Remote SQL Injection Vulnerability

No description provided by source. ----------------Mor0ccan Nightmares---------------- ------------------------------ Script: Turnkey Arcade Script- ------------------------------ ----------------------------------- Site: http://www.turnkeyarcade.com- -----------------------------------...

Turnkey Arcade Script - SQL Injection (1)

Turnkey Arcade Script - SQL Injection 1 ----------------Mor0ccan Nightmares---------------- ------------------------------ Script: Turnkey Arcade Script- ------------------------------ ----------------------------------- Site: http://www.turnkeyarcade.com- -----------------------------------...

Turnkey Arcade Script (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Turnkey Arcade Script id Remote SQL Injection Vulnerability =============================================================...

Turnkey Arcade Script - SQL Injection (1)

----------------Mor0ccan Nightmares---------------- ------------------------------ Script: Turnkey Arcade Script- ------------------------------ ----------------------------------- Site: http://www.turnkeyarcade.com- -----------------------------------...

Prozilla Software Directory - Cross-Site Scripting SQL Injection

Prozilla Software Directory - Cross-Site Scripting SQL Injection ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

sfshotornot-sql.txt

SFS EZ Hot or Notviewcomments.php?phid Remote SQL Injection Vulnerability =============================================================== ---------------------------------------------------------------- script : SFS EZ Hot ot Not script : http://www.scripts-for-sites.info Risk : High...

Sql injection

Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an editregistry action to index.php, 2 a vector involving the checkemail function, and other vectors...

CVE-2008-3768

Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an editregistry action to index.php, 2 a vector involving the checkemail function, and other vectors...

CVE-2008-3768

The vulnerability is in Turnkey Web Tools SunShop Shopping Cart before 4.1.5, affecting the file component class.ajax.php . The CVE-2008-3768 entry describes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. Exploitation paths include (1) the id...

CVE-2008-3768: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an editregistry action to index.php, 2 a vector involving the checkemail function, and other vectors...