Lucene search
+L

6078 matches found

osv_cve
osv_cve
•added 2023/09/30 9:15 p.m.•18 views

CVE-2023-43714

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "SKIPCARTPAGETITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.9AI score0.00455EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/28 10:15 p.m.•26 views

CVE-2023-43739

The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS9.6AI score0.00976EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/09/28 10:15 p.m.•20 views

CVE-2023-43739

The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00976EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/09/21 2:15 p.m.•21 views

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

7.5CVSS5.8AI score0.00672EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/09/21 2:15 p.m.•8 views

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

7.5CVSS5.9AI score0.00672EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/21 2:15 p.m.•34 views

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

7.5CVSS8AI score0.00672EPSS
SaveExploits1References1
Prion
Prion
•added 2023/09/21 2:15 p.m.•31 views

Sql injection

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

5CVSS8AI score0.00672EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/09/21 12:00 a.m.•21 views

PT-2023-28755 · Phpjabbers · Phpjabbers Php Shopping Cart

Name of the Vulnerable Software and Affected Versions: Phpjabbers PHP Shopping Cart version 4.2 Description: The issue is related to SQL Injection via the id parameter. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devices...

7.5CVSS8.5AI score0.00672EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2023/09/21 12:00 a.m.•19 views

PHP Shopping Cart SQL Injection Vulnerability

PHP Shopping Cart is Phpjabbers open source a shopping cart system . PHP Shopping Cart 4.2 version has a security vulnerability , the vulnerability stems from the parameter id SQL injection vulnerability...

7.5CVSS8.1AI score0.00672EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/09/21 12:00 a.m.•47 views

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

8.2AI score0.00672EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/09/21 12:00 a.m.•12 views

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

8.2AI score0.00672EPSS
SaveExploits1References1
CVE
CVE
•added 2023/09/21 12:00 a.m.•137 views

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter in its SQL queries (CVE-2023-43274). The CVSS 3.1 base score is 7.5 (HIGH) with Network attack vector, Low attack complexity, Privileges Required NONE, and impact limited to Confidentiality (HIGH). Exploitation a...

7.5CVSS8AI score0.00672EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/21 12:00 a.m.•8 views

CVE-2023-43274: Improper Neutralization of Special Elements used in an SQL Command

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

7.5CVSS7.3AI score0.00672EPSS
SaveExploits1References3
Packet Storm
Packet Storm
•added 2023/09/13 12:00 a.m.•422 views

PHP Shopping Cart 4.2 SQL Injection

Title: PHP Shopping Cart-4.2 Multiple-SQLi Author: nu11secur1ty Date: 09/13/2023 Vendor: https://www.phpjabbers.com/ Software:https://www.phpjabbers.com/php-shopping-cart-script/sectionPricing Reference: https://portswigger.net/web-security/sql-injection Description: The id parameter appears to b...

7.1AI score
SaveExploits0
zdt
zdt
•added 2023/09/13 12:00 a.m.•411 views

PHP Shopping Cart 4.2 SQL Injection Vulnerability

Title: PHP Shopping Cart-4.2 Multiple-SQLi Author: nu11secur1ty Vendor: https://www.phpjabbers.com/ Software:https://www.phpjabbers.com/php-shopping-cart-script/sectionPricing Reference: https://portswigger.net/web-security/sql-injection Description: The id parameter appears to be vulnerable to S...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2023/09/08 12:00 a.m.•470 views

SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection

Exploit Title: SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection Exploit Author: CraCkEr Date: 20/08/2023 Vendor: SPA-Cart Vendor Homepage: https://spa-cart.com/ Software Link: https://demo.spa-cart.com/ Version: 1.9.0.3 Tested on: Windows 10 Pro Impact: Database Access CVE: CVE-2023-4548 CWE: CWE-8...

9.8CVSS6.8AI score0.32225EPSS
SaveExploits4
Patchstack
Patchstack
•added 2023/09/05 12:00 a.m.•23 views

WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR)

Software Sunshine Photo Cart Type Plugin Vulnerable versions 3.0.0 Fixed in 3.0.0 OWASP Top 10 A6: Security Misconfiguration Classification Insecure Direct Object References IDOR CVE CVE-2023-41796 Patch priority Low CVSS severity Low 5.3 Developer WP Sunshine PSID 684b84aa11e3 Credits yuyudhn...

6.5CVSS6.5AI score0.00424EPSS
SaveExploits0References2Affected Software1
Exploit DB
Exploit DB
•added 2023/09/04 12:00 a.m.•376 views

SPA-Cart eCommerce CMS 1.9.0.3 - Reflected XSS

Exploit Title: SPA-Cart eCommerce CMS 1.9.0.3 - Reflected XSS Exploit Author: CraCkEr Date: 20/08/2023 Vendor: SPA-Cart Vendor Homepage: https://spa-cart.com/ Software Link: https://demo.spa-cart.com/ Version: 1.9.0.3 Tested on: Windows 10 Pro Impact: Manipulate the content of the site CVE:...

6.1CVSS5AI score0.6034EPSS
SaveExploits5
osv_cve
osv_cve
•added 2023/08/30 4:15 p.m.•18 views

CVE-2023-28415

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in XootiX Side Cart Woocommerce Ajax plugin = 2.2 versions...

4.8CVSS5.8AI score0.00506EPSS
SaveExploits1References1
NVD
NVD
•added 2023/08/30 4:15 p.m.•27 views

CVE-2023-28415

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in XootiX Side Cart Woocommerce Ajax plugin = 2.2 versions...

5.9CVSS5.4AI score0.00506EPSS
SaveExploits1References1
Rows per page
Query Builder