Merchandise Online Store Code Issues and Vulnerabilities

Merchandise Online Store is a Merchandise Online Store system developed by Carlo Montero. A security vulnerability exists in Merchandise Online Store v1.0, which is caused by a remote code injection issue in the user profile upload port on the system information page...

Code injection

The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger false alerts via crafted packets to TCP port 41013 aka the upload port, a different vulnerability than CVE-2012-2607...

CVE-2012-4026

The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger false alerts via crafted packets to TCP port 41013 aka the upload port, a different vulnerability than CVE-2012-2607...

PT-2012-5153

Name of the Vulnerable Software and Affected Versions Johnson Controls Pegasys P2000 server versions prior to 3.11 Description The issue allows remote attackers to trigger false alerts by sending crafted packets to the TCP port 41013, also known as the upload port. Recommendations For versions...