CVE-2023-43148

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...

SPA-Cart eCommerce CMS Cross-Site Request Forgery Vulnerability

SPA-Cart eCommerce CMS is a CMS system from SPA-Cart Inc. A security vulnerability exists in SPA-Cart eCommerce CMS version 1.9.0.3 that stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker can exploit the vulnerability to delete all accounts...

CVE-2023-43149

CVE-2023-43149 affects SPA-Cart 1.9.0.3. The documents confirm a CSRF vulnerability enabling a remote attacker to add an admin user with role status. They do not provide concrete technical details (endpoints, payloads, root cause) or remediation within the supplied sources. No exploitation specif...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

CVE-2023-44061

The CVE-2023-44061 entry concerns the Simple and Nice Shopping Cart Script v1.0. A vulnerability in the upload function of the edit profile component enables a remote attacker to execute arbitrary code. This is described with a CVSS v3.1 base score of 8.8 (HIGH) with network attack vector, low at...

Simple and Nice Shopping Cart Script Code Issue Vulnerability

Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. A security vulnerability exists in Simple and Nice Shopping Cart Script v.1.0, which originates from a file upload vulnerability. The vulnerability can be exploited to execute arbitrary code via the edit profile...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)

Software Abandoned Cart Lite for WooCommerce Type Plugin Vulnerable versions = 5.15.2 Fixed in 5.16.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-44986 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3d15bd807ee2 Credits Robert DeVore...

CVE-2023-43714

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "SKIPCARTPAGETITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43739

The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-43739

The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

Sql injection

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

PT-2023-28755 · Phpjabbers · Phpjabbers Php Shopping Cart

Name of the Vulnerable Software and Affected Versions: Phpjabbers PHP Shopping Cart version 4.2 Description: The issue is related to SQL Injection via the id parameter. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devices...

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter in its SQL queries (CVE-2023-43274). The CVSS 3.1 base score is 7.5 (HIGH) with Network attack vector, Low attack complexity, Privileges Required NONE, and impact limited to Confidentiality (HIGH). Exploitation a...