CVE-2022-23320

Summary: CVE-2022-23320 affects XMPie uStore 12.3.7244.0. The issue is an authentication/authorization weakness where default administrative credentials allow attackers to log in and exploit the ability to run or access raw SQL-based reports , leading to potential exfiltration of sensitive databa...

PT-2022-15928 · Xmpie · Xmpie Ustore

Name of the Vulnerable Software and Affected Versions: XMPie uStore version 12.3.7244.0 Description: The issue allows administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application...

Xmpie Ustore 授权问题漏洞

Xmpie Ustore is a network printing solution from Xmpie USA. An authorization issue vulnerability exists in XMPie uStore that stems from the product allowing access to the application to steal database information via the included default administrative credentials. The following products and...

ASPintranet SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/ecommercekit.txt ----------------------------------------------------------- Software: UStore | E-Commerce Kit 2 Vendor: http://www.sitesoutlet.com...

Ustore SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/UStore.txt ----------------------------------------------------------- Software: UStore | E-Commerce in 15-Minutes Method : Sql Injection PoC:...

CVE-2006-5891

SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-5891

SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-5891

CVE-2006-5891 affects Superfreaker Studios UStore 1.0. A SQL injection in detail.asp (via the ID parameter) allows remote execution of arbitrary SQL commands. The CVSS2 base score is 7.5 (HIGH) with network attack vector, low complexity, no authentication, and partial impact on C/I/A. Exploitatio...

UStore 1.0 (detail.asp) Remote SQL Injection Vulnerability

Title : UStore 1.0 detail.asp Remote SQL Injection Vulnerability Author : ajann http://target/path//detail.asp?ID=SQL Example: //detail.asp?ID=-120union20select200,username,password,0,0,0,0,0,0,020from20tblusers20where20id20like201 """"""""""""""""""""" ajann,Turkey ... Im not Hacker!...

UStore 1.0 (detail.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : UStore 1.0 detail.asp Remote SQL Injection Vulnerability Author : ajann Vendor: http://www.superfreaker.com/ http://target/path//detail.asp?ID=SQL Example:...

ustore-10.txt

Title : UStore 1.0 detail.asp Remote SQL Injection Vulnerability Author : ajann http://target/path//detail.asp?ID=SQL Example: //detail.asp?ID=-1%20union%20select%200,username,password,0,0,0,0,0,0,0%20from%20tblusers%20where%20id%20like%201 """"""""""""""""""""" ajann,Turkey ... Im not Hacker!...

UStore 1.0 (detail.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== UStore 1.0 detail.asp Remote SQL Injection Vulnerability ========================================================== Title : UStore 1.0 detail.asp Remote SQL Injection Vulnerability...

UStore 1.0 - detail.asp SQL Injection

UStore 1.0 - detail.asp SQL Injection Title : UStore 1.0 detail.asp Remote SQL Injection Vulnerability Author : ajann Vendor: http://www.superfreaker.com/ http://target/path//detail.asp?ID=SQL Example:...

UStore 1.0 - 'detail.asp' SQL Injection

Title : UStore 1.0 detail.asp Remote SQL Injection Vulnerability Author : ajann Vendor: http://www.superfreaker.com/ http://target/path//detail.asp?ID=SQL Example: //detail.asp?ID=-1%20union%20select%200,username,password,0,0,0,0,0,0,0%20from%20tblusers%20where%20id%20like%201 """""""""""""""""""...

CVE-2005-4356

SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4355

Multiple cross-site scripting XSS vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the 1 Cat parameter in default.asp and the 2 accessdenied parameter in admin/default.asp. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2005-4356

UStore is affected by a SQL injection vulnerability enabling remote attackers to execute arbitrary SQL via the (1) username and (2) password fields. Root cause: improper input handling allowing crafted queries. Impact is partial confidentiality, integrity, and availability (per CVSS v2.0: AV:N/AC...

CVE-2005-4356

SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4355

Multiple cross-site scripting XSS vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the 1 Cat parameter in default.asp and the 2 accessdenied parameter in admin/default.asp. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2005-4355

CVE-2005-4355 : The data shows multiple cross-site scripting (XSS) vulnerabilities in the UStore web application. The issues affect parameters in the public and admin interfaces: (1) the Cat parameter in default.asp and (2) the accessdenied parameter in admin/default.asp. The root cause is improp...