6050 matches found
WordPress J Cart Upsell and Cross-sell for WooCommerce plugin < 2.0.1 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress J Cart Upsell and Cross-sell for WooCommerce plugin versions 2.0.1. Solution Update the WordPress J Cart Upsell and Cross-sell for WooCommerce plugin to the latest available version at least 2.0.1...
Exposure of Resource to Wrong Sphere in microweber
Exposure of Resource to Wrong Sphere in microweber prior to 1.3 allows users to add deleted products to a cart and buy it...
PT-2022-13418 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber versions prior to 1.3 Description: The issue concerns business logic errors and incorrect authorization in the microweber repository. This allows users to add deleted products to a cart and buy them, exposing resources to the wrong...
Business Logic Errors in microweber
Microweber prior to 1.2.11 can suffer from insecure direct object references. A malicious actor can remove items from a victim's cart...
PT-2022-13360
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.11 Description The issue concerns business logic errors and insecure direct object references in the software. A malicious actor can exploit this to remove items from a victim's cart. Recommendations...
Business Logic Errors
Description I found a IDOR vulnerability where we can able to delete their product in the cart by the id parameter Steps to Produce: First add any product in to the cart and checkout In the checkout page , we can see the cart details and we have functionality to delete the product also I gave the...
S-Cart path traversal vulnerability
S-cart, a Php-based e-commerce management platform from the S-cart community, suffers from a path traversal vulnerability that stems from the failure of a web-based system or product to properly filter special elements in the path of a resource or file. An attacker could exploit the vulnerability...
Directory Traversal
S-Cart is vulnerable to directory traversal. The vulnerability exists due to a lack of sanitization of the input via the download function allowing an attacker to download arbitrary file via the download request...
Path Traversal in S-Cart
A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...
GHSA-H676-PJR4-HGQX Path Traversal in S-Cart
A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...
CVE-2021-44111
A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...
CVE-2021-44111
A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...
CVE-2021-44111
A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...
Directory traversal
A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...
CVE-2021-44111
A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...
CVE-2021-44111
CVE-2021-44111 is a directory traversal vulnerability in S-Cart 6.7 allowing path traversal via the download function in sc-admin/backup. Public reports (CNVD/CNNVD/OSV/GHSA) describe the flaw as enabling access to sensitive information due to insufficient input filtering. The NVD entry lists the...
CVE-2021-44111
A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...
PT-2022-11991
Name of the Vulnerable Software and Affected Versions S-Cart version 6.7 Description A Directory Traversal issue exists, allowing unauthorized access to files. This is possible via the download functionality in the sc-admin/backup area. Recommendations For S-Cart version 6.7, update to a newer...
S-cart path traversal vulnerability
S-cart, a Php-based e-commerce management platform from the S-cart community, suffers from a path traversal vulnerability that stems from the failure of a web-based system or product to properly filter special elements in the path of a resource or file. An attacker could exploit the vulnerability...
