CVE-2020-24677: Improper Check for Unusual or Exceptional Conditions

Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data...

PT-2020-15807

Name of the Vulnerable Software and Affected Versions S+ Operations versions 2.1 SP1 and earlier Description The issue concerns the use of client-side authentication in the affected versions, which is less secure than server-side validation. This allows unauthorized actors to bypass authenticatio...

CVE-2020-24673: Improper Neutralization of Special Elements used in an SQL Command

In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify database data Insert/Update/Delete, execute administration operations on the database such as shutdown the DBMS, recover the content of a given file present on the DBMS file...

S-cart Cross-Site Scripting Vulnerability

S-cart is a Php-based e-commerce management platform for the S-cart community. A cross-site scripting vulnerability exists in s-cart core before version 4.4, which stems from vulnerability to administration panel cross-site scripting XSS attacks. An attacker can exploit the vulnerability to execu...

Cross-site Scripting (XSS)

s-cart is vulnerable to cross-site scirpting XSS. An attacker is able to inject and execute malicious script via the search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex...

CVE-2020-28457

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...

CVE-2020-28457

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...

Cross site scripting

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting XSS via the admin panel...

Cross site scripting

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...

CVE-2020-28456 Cross-site Scripting (XSS)

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting XSS via the admin panel...

CVE-2020-28456

The CVE-2020-28456 entry affects s-cart/core before version 4.4, with a Cross-site Scripting (XSS) vulnerability exploitable via the admin panel. The root cause is improper handling of input in the admin interface, enabling injection of client-side code. Impact is client-side script execution, po...

CVE-2020-28456

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting XSS via the admin panel...

CVE-2020-28457

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...

CVE-2020-28457

The CVE-2020-28457 entry is backed by concrete data across sources: it affects the Laravel-based e-commerce package s-cart/core up to version 4.3.x and is triggered by a XSS in the admin dashboard search (AdminOrderController.phpindex) . The vulnerability allows injection of malicious scripts via...

S-cart 跨站脚本漏洞

S-cart is a Php-based e-commerce management platform for the S-cart community. A cross-site scripting vulnerability exists in s-cart core before version 4.4, which stems from vulnerability to administration panel cross-site scripting XSS attacks. An attacker can exploit the vulnerability to execu...

CVE-2020-28456: Improper Neutralization of Input During Web Page Generation

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting XSS via the admin panel...

Apple iOS Security Vulnerability

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple Apple. A security vulnerability exists in Apple iOS 12, where unauthorized code execution may result in a violation of authentication policies. The following products and versions are affected: iPho...

PT-2020-17014

Name of the Vulnerable Software and Affected Versions s-cart/core versions prior to 4.4 Description The search functionality of the admin dashboard in the file core/src/Admin/Controllers/AdminOrderController.php is vulnerable to XSS. This issue affects the package s-cart/core. Recommendations For...

S-cart Cross-Site Scripting Vulnerability

S-cart is a Php-based e-commerce management platform from the S-cart community. A cross-site scripting vulnerability exists in s-cart core before version 4.4, which stems from a lack of detection of client-side input in the search function of the admin dashboard in...

CVE-2020-28457: Improper Neutralization of Input During Web Page Generation

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...