CVE-2017-17936

Vanguard Marketplace Digital Products PHP has CSRF via /search...

CVE-2017-17936

CVE-2017-17936 affects Vanguard Marketplace Digital Products PHP and is described as a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered via the /search endpoint. Connected documents from CNVD-2018-01117 and RH/Red Hat corroborate the CSRF via /search, with NVD similarly notin...

CVE-2017-17937

Vanguard Marketplace Digital Products PHP is affected by a cross-site scripting (XSS) vulnerability in the phps_query parameter of the /search endpoint. The issue is consistently reported across multiple feeds (CVE-2017-17937 references) and appears in Red Hat, CNVD, NVD, and CVE records as a PHP...

CVE-2017-17937

Vanguard Marketplace Digital Products PHP has XSS via the phpsquery parameter to /search...

CVE-2017-17873

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...

CVE-2017-17874

Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI...

CVE-2017-17874

Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI...

CVE-2017-17873

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...

CVE-2017-17873

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...

Sql injection

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...

CVE-2017-17874

Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI...

Default credentials

Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI...

CVE-2017-17873

CVE-2017-17873 affects Vanguard Marketplace Digital Products PHP 1.4. It describes an SQL injection via PATH_INFO to the /p URI in the PHP-based scripts used for online trading, allowing potentially unauthorized access to data with network-exposed risk. The CVSSv3 vector is CVSS:3.0/AV:N/AC:L/PR:...

CVE-2017-17873

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...

CVE-2017-17874

CVE-2017-17874 affects Vanguard Marketplace Digital Products PHP 1.4. A vulnerability allows arbitrary file upload via the“Add a new product” or “Add a product preview” actions, which can result in a PHP file being accessible under an uploads/ URI. Public references in the record indicate an expl...

CVE-2017-17874

Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI...

Vanguard 1.4 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Vanguard - Marketplace Digital Products PHP 1.4 - SQL Injection Dork: N/A Date: 11.12.2017 Vendor Homepage: https://www.codegrape.com/user/Vanguard/portfolio Software Link:...

Vanguard 1.4 SQL Injection

Exploit Title: Vanguard - Marketplace Digital Products PHP 1.4 - SQL Injection Dork: N/A Date: 11.12.2017 Vendor Homepage: https://www.codegrape.com/user/Vanguard/portfolio Software Link: https://www.codegrape.com/item/vanguard-marketplace-digital-products-php/15825 Version: 1.4 Category: Webapps...

Vanguard 1.4 - Arbitrary File Upload

Exploit Title: Vanguard - Marketplace Digital Products PHP 1.4 - Arbitrary File Upload Dork: N/A Date: 11.12.2017 Vendor Homepage: https://www.codegrape.com/user/Vanguard/portfolio Software Link: https://www.codegrape.com/item/vanguard-marketplace-digital-products-php/15825 Demo:...

Vanguard 1.4 - Arbitrary File Upload

Vanguard 1.4 - Arbitrary File Upload Exploit Title: Vanguard - Marketplace Digital Products PHP 1.4 - Arbitrary File Upload Dork: N/A Date: 11.12.2017 Vendor Homepage: https://www.codegrape.com/user/Vanguard/portfolio Software Link:...